On Wed, Nov 30, 2005 at 01:35:38PM +0000, Ben Laurie wrote:
Daniel A. Nagy wrote:
On Wed, Nov 30, 2005 at 10:40:40AM +0000, Ben Laurie wrote:
Does this mean they should not be included in the signature, or also
that they should be stripped from the dash-escaped text?
It doesn't matter.
Of course it matters!
No, it does not. Either way, the signature will verify. It is up to the
implementation to strip or not to strip empty line endings. It can even
change them (e.g. add a few spaces and tabs after some of the line endings).
Canonization is an idempotent operation. Documents that are the same after
canonization are considered identical as far as text signaures go.
For pure ascii text, a printed clearsigned document, if typed back in, should
verify. Unfortunately, with unicode this is no longer the case, as there is a
whole bunch of different letters that look exactly the same (e.g. "o" and
"о" -- the latin and cyrillic "o", repsectively). Actually, this is problem
for legal applications.
--
Daniel