Daniel A. Nagy wrote:
On Wed, Nov 30, 2005 at 10:40:40AM +0000, Ben Laurie wrote:
" Also, any trailing whitespace -- spaces (0x20) and tabs (0x09) -- at
the end of any line is removed when the cleartext signature is
generated."
Does this mean they should not be included in the signature, or also
that they should be stripped from the dash-escaped text?
It doesn't matter.
Of course it matters!
" The line ending (i.e. the <CR><LF>) before the '-----BEGIN PGP
SIGNATURE-----' line that terminates the signed text is not
considered part of the signed text."
Does this mean that one should insert an extra <CR><LF> before the
terminating line? I notice that at least some implementations do not.
Yes, it does. The '-----BEGIN PGP SIGNATURE-----' must begin in a new line.
The line termination before it is not part of the signature. AFAIK, all
implementations treat it that way.
That doesn't answer the question.
--
http://www.apache-ssl.org/ben.html http://www.thebunker.net/
** ApacheCon - Dec 10-14th - San Diego - http://apachecon.com/ **
"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff