-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 * Peter Palmreuther <[EMAIL PROTECTED]>: > Hello Stefan, > > On Monday, November 3, 2003 at 5:26:36 PM you [ST] wrote (at least in > part): > > VE>> I noticed some bug in TB!'s implementation of PGP 8. When I turn on > VE>> "Sign when Completed" and turn off PGP/MIME then after signing the > VE>> "-- " (dash dash space) converted into "- --" (dash space dash > VE>> dash). > > ST> Trailing spaces are stripped before a message is signed using PGP > ST> clearsign to avoid losing signature validity due to misconfigured > ST> servers. Generally, it won't be correct to restore "--" as "-- ", so > ST> it depends on how you testers vote for it :-)) > > As much as I'd like PGP-signature-verified mails to contain '-- ' as > signature delimiter: it wouldn't be correct if TB! would silently add > the "missing" space. TB! /cannot/ know if there was a space before > singing was done, so it /must not/ add one. It must display the text > that was signed, which is the one without trailing space :-/
And what if TB does it like some other clients and does not delete trailing spaces? RFC2440 says: Also, any trailing whitespace (spaces, and tabs, 0x09) at the end of any line is ignored when the cleartext signature is calculated. It doesnot say that trailing spaces must be deleted! They must be ignored. And i cannot see the risk of "losing signature validity due to misconfigured servers." - -- Regards Torsten -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (GNU/Linux) iD8DBQE/ppv6u8cU0ZxnzZYRApZNAJ0ecMjTX7F1zQGbq44o+ie+ZpSDEwCfUu/x LF56ecj4Mc3FaXn/E1j5Op0= =tbxY -----END PGP SIGNATURE----- ________________________________________________________ Current beta is 2.01.20 | "Using TBBETA" information: http://www.silverstones.com/thebat/TBUDLInfo.html
