ietf-smime
[Top] [All Lists]

RE: Information on PKCS #1 vulnerability and update

1998-07-17 18:15:40
To the MSG or the CMS draft?  It seems that PKCS #1 usage is defined in
CMS, not MSG.

My thought was MSG because CMS might be used for online transactions, so
the wording would have to be very different. On further reflection, I think
we need to say something in both. MSG has a shorter "it's hard to get the
problem to happen in S/MIME unless there is an autoresponder who is very
verbose", and CMS has that plus information about online apps that use the
format as well.

--Paul Hoffman, Director
--Internet Mail Consortium

<Prev in Thread] Current Thread [Next in Thread>