On Wed, May 03, 2006 at 03:16:21PM -0700, Andrew Pimlott wrote:
> On Wed, May 03, 2006 at 11:18:04AM -0400, David Shaw wrote:
> > This is not a bug.  Clearsigned messages are not reversible to restore
> > the original message including line endings and trailing whitespace.
> > If perfect reversibility is desired, you must use regular signatures.
> 
> Ok, but this seems like a strange and unexpected design for a
> signature.

It's part of the OpenPGP spec: under "Cleartext signature framework"
it says "Note that this framework is not intended to be reversible."

If you think about it, clear signatures have to modify the message to
some extent as line endings are different on different platforms.

> There should probably be some strong warnings in the documentation.  For
> example, the handbook misleadingly says
> 
>     The option --clearsign causes the document to be wrapped in an
>     ASCII-armored signature but otherwise does not modify the document.
> 
> Maybe the docs should say
> 
>     Clearsigning modifies the message in minor ways that should not
>     affect reading.  However, for this reason it should not be used on
>     data that must be preserved exactly.

Ok, I'll add a note.

David


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to