Comment 7 for bug 784473

You really need to use --output to process inline signatures, trying to exactly match what gnupg validated externally is not a robust way to run such important crypto. It would be better to require full gpg until gpgv can be fixed - (not having --output in gpgv only encourages incorrect use of the program!).