ietf-openpgp
[Top] [All Lists]

Re: Let's resolve the end-of-line and whitespace question

2004-02-20 09:19:19


So a way through this may be to say, in the
context of cleartext signatures:

    a) us-ascii whitespace is always stripped from
       the end of lines in signature calculation,
       both in signing and verification.

    b) UTF-8 whitespace may be stripped from the
       end of lines in signing, but in this case, the
       document should be transmitted in its clean
       interchange form, with these characters
       cleaned from the end of lines, so that the
       recipient can calculate (verify) correctly.

as this is an area of potential confusion that may appear to render a
clearsigned message signature 'bad' ,

then would it be advisable/feasible to add a packet to clearsigned messages,

that would include the whitespace parameters used by the implemenatation,
 
as well as the total number of lines, columns,and 'empty' whitespace
lines of the final clearsigned text 
(counting from the header of the message, to the header of the signature)

this would allow for a simple reconstruction of the message,
back into proper verifiable form,
no matter how mangled it might be 
by various e-mail client and re-mailers,


vedaal









Concerned about your privacy? Follow this link to get
FREE encrypted email: https://www.hushmail.com/?l=2

Free, ultra-private instant messaging with Hush Messenger
https://www.hushmail.com/services.php?subloc=messenger&l=434

Promote security and make money with the Hushmail Affiliate Program: 
https://www.hushmail.com/about.php?subloc=affiliate&l=427