ietf-openpgp
[Top] [All Lists]

Re: Cleartext Signatures

2005-10-11 15:41:21

On Mon, Oct 10, 2005 at 06:58:03PM +0100, Ben Laurie wrote:

Daniel A. Nagy wrote:
On Mon, Oct 10, 2005 at 03:30:29PM +0100, Ben Laurie wrote:


That mantra has shown to be a less than great idea recently, since it 
promotes interestingly obscure security holes, so I still would like to 
know what the correct behaviour is, and I'd like the I-D to accurately 
document that behaviour.


In that case, the empty line should be mandated,

I agree.

As do I, but it seems to me that it is already mandated.  Section 6.2
(Forming ASCII Armor) mandates the line.  Section 7 (Cleartext
signature framework) refers to "The ASCII armored signature(s)".
Doesn't it them follow that the armored signature (like all armor)
mandates the line?  Am I reading into something that isn't there?

David

<Prev in Thread] Current Thread [Next in Thread>