Re: Outstanding question - rule on cleartext signing last line

[[e-mail] (Daniel A. Nagy)]

On Mon, Dec 26, 2005 at 12:29:15PM +0000, Ben Laurie wrote:
> 
> David Shaw wrote:
> > On Thu, Dec 08, 2005 at 01:23:01PM +0100, Werner Koch wrote:
> >> On Thu, 08 Dec 2005 11:43:48 +0000, Ian G said:
> >>
> >>> But I think we need to hear from the PGP Inc and GPG
> >>> architects on this?
> >> I recall that we tweaked gpg's behaviour in this regard until all
> >> users were satisfied.  Thus I'd say not to add new requirement to the
> >> specs.
> > 
> > I agree.  I think the spec is just fine in this regard: the final CRLF
> > (the one before the "-----BEGIN PGP SIGNATURE-----") is not part of
> > the signature.  That allows for the GPG behavior to preserve the
> > presence or lack of line ending on the last line.
> 
> However, it doesn't. This strikes me as a bug both in GPG and in the spec.

Yes it does. GPG behaves slightly differently with messages entered from the
console, but that makes a lot of sense, too. I don't see any bugs in either
the specs and GPG. I have coded up my own OpenPGP implementation based on
the spec (http://pgp.epointsystem.org/tool) and it interoperates perfectly
with GPG.

-- 
Daniel