Re: Lack of clarity in dash-escaped?

[Ben Laurie <[e-mail]>]

Daniel A. Nagy wrote:
> On Wed, Nov 30, 2005 at 10:40:40AM +0000, Ben Laurie wrote:
>> "   Also, any trailing whitespace -- spaces (0x20) and tabs (0x09) -- at
>>     the end of any line is removed when the cleartext signature is
>>     generated."
>>
>> Does this mean they should not be included in the signature, or also
>> that they should be stripped from the dash-escaped text?
> 
> It doesn't matter.

Of course it matters!

>> "   The line ending (i.e. the <CR><LF>) before the '-----BEGIN PGP
>>     SIGNATURE-----' line that terminates the signed text is not
>>     considered part of the signed text."
>>
>> Does this mean that one should insert an extra <CR><LF> before the
>> terminating line? I notice that at least some implementations do not.
> 
> Yes, it does. The '-----BEGIN PGP SIGNATURE-----' must begin in a new line.
> The line termination before it is not part of the signature. AFAIK, all
> implementations treat it that way.

That doesn't answer the question.

-- 
http://www.apache-ssl.org/ben.html       http://www.thebunker.net/
**  ApacheCon - Dec 10-14th - San Diego - http://apachecon.com/ **
"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff