pem-dev
[Top] [All Lists]

Re: PEM/MIME Encryption

1994-12-19 11:59:00
   Date: Sun, 18 Dec 1994 15:33:22 -0700 (PDT)
   From: Ned Freed <NED(_at_)INNOSOFT(_dot_)COM>

   >    I'm missing something.  Kazu's original question was about
   > CR/LF/CRLF text canonnicalization.  MIME deals with this correctly, yes?

   Yes it does.

   > Is what you're saying is that MIME/PEM does not, and that's a feature?

   Well, MIME/PEM does complicate matters somewhat, and I guess that's a
   feature.  Specifically, anything encrypted is just a bag of bits to
   everyone except the recipient, and this had some unpleasant effects
   on automatic format converters and similar services. But there's no
   problem in terms of canonicalization as far as I know.

Well, MIME/PEM could have dealt with it correctly.

For example, if MIME deals with the text cannonicalization correctly,
then Jeff Schiller's simple MIME/PEM integration proposal would have
dealt the CR/LF/CRLF cannonicalization correctly, since in that proposal
the encryption was applied after MIME had done its magic rain dance and
just before the message was sent out on the while.  Similarily, upon
receipt of an encrypted message, the simplified MIME/PEM integration
decrypted the message, and then passed the result to the MIME processor
where the result could have the appropriate magic happen to it so that
text cannonicalization process could be completed properly.

What I want to understand is why your MIME/PEM proposal doesn't support
similar functionality.  The fact that it doesn't seems to be broken,
IMHO.

                                                - Ted


<Prev in Thread] Current Thread [Next in Thread>