Alessandro Vesely wrote:
Version -10 says
More formally, pseudo-code for the signature algorithm is:
body-hash = hash-alg (canon-body, l-param)
data-hash = hash-alg (h-headers, D-SIG, content-hash)
signature = sig-alg (d-domain, selector, data-hash)
where:
body-hash: is the output from hashing the body, using hash-alg.
Shouldn't it say
More formally, pseudo-code for the signature algorithm is:
body-hash = hash-alg (canon-body limited by l-param)
data-hash = hash-alg (h-headers, D-SIG with body-hash)
signature = sig-alg (d-domain, selector, data-hash)
where:
body-hash: is the output from hashing the body, using hash-alg.
It is set as the value of the bh= tag in D-SIG for computing
the data-hash.
?
Sounds technically correct. +1
--
Hector Santos, CTO
http://www.santronics.com
http://santronics.blogspot.com
_______________________________________________
NOTE WELL: This list operates according to
http://mipassoc.org/dkim/ietf-list-rules.html