-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Mon, Sep 17, 2007 at 02:55:44PM -0700, Murray S. Kucherawy wrote:
>On Mon, 17 Sep 2007, Jim Fenton wrote: >> Implementing old canonicalization schemes seems onerous, but I wonder if >> it would be possible to just provide an option to be more permissive >> about the version numbers. That way, if the canonicalization change >> only affects some messages/canonicalizations, it might be possible to >> verify some additional messages. I doubt that it would open any >> significant exploits. >Try patch #1796687, now available on SourceForge. I've applied it to my two machines, I'll let you know if I see any strangeness. - -- Regards... Todd There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order. --Ed Howdershelt Linux kernel 2.6.17-6mdv 2 users, load average: 0.09, 0.03, 0.00 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFG7xGYY2VBGxIDMLwRAo9mAJ4/asjc/+8A6b+VcRMSGGaF6+L5gwCfVHH6 xKM2M0niTr/wJBrMDH1+hYM= =DTOc -----END PGP SIGNATURE----- ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ dkim-milter-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/dkim-milter-discuss
