ietf-822
[Top] [All Lists]

Re: Is 8BIT ESTMP really needed

2001-05-08 06:22:42
I think we established, a few weeks back, that the RFC defining
Content-MD5 should really have made it clearer exactly when LF->CRLF
canonicalization had to be done. 

actually I think it's clear (or should be) that the MD5 computation
should be completely independent of canonicalization.  that is, even
if the canonicalization was done improperly, the MD5 needs to be
computed over the form of the body part that exists *after* 
canonicalization and *prior* to any content-transfer-encoding.
the MD5 computation shouldn't try to second-guess the canonicalization,
nor should it be sensitive to either content-type or content-transfer-encoding

things are far less confusing and less prone to misimplementation if we
maintain a clean separation of function between layers.

Keith