Whither SignerInfo content-type?
pgut001@cs.aucKland.ac.nz (Peter Gutmann) Wed, 10 March 1999 15:45 UTC
Received: from mail.proper.com (mail.proper.com [206.86.127.224]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA12567 for <smime-archive@odin.ietf.org>; Wed, 10 Mar 1999 10:45:22 -0500 (EST)
Received: (from majordomo@localhost) by mail.proper.com (8.8.8/8.8.5) id GAA01336 for ietf-smime-bks; Wed, 10 Mar 1999 06:35:08 -0800 (PST)
Received: from mail.student.auckland.ac.nz (mail.student.auckland.ac.nz [130.216.35.101]) by mail.proper.com (8.8.8/8.8.5) with ESMTP id GAA01331 for <ietf-smime@imc.org>; Wed, 10 Mar 1999 06:35:05 -0800 (PST)
Received: from cs26.cs.auckland.ac.nz (pgut001@cs26.cs.auckland.ac.nz [130.216.36.9]) by mail.student.auckland.ac.nz (8.8.6/8.8.6/cs-master) with SMTP id DAA31315 for <ietf-smime@imc.org>; Thu, 11 Mar 1999 03:41:01 +1300 (NZDT) (sender pgut001@cs.auckland.ac.nz)
Received: by cs26.cs.auckland.ac.nz (relaymail v0.9) id <92107686005906>; Thu, 11 Mar 1999 03:41:00 (NZDT)
From: pgut001@cs.aucKland.ac.nz
To: ietf-smime@imc.org
Subject: Whither SignerInfo content-type?
Reply-To: pgut001@cs.aucKland.ac.nz
X-Charge-To: pgut001
X-Authenticated: relaymail v0.9 on cs26.cs.auckland.ac.nz
Date: Thu, 11 Mar 1999 03:41:00 -0000
Message-ID: <92107686005906@cs26.cs.auckland.ac.nz>
Sender: owner-ietf-smime@imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-smime/mail-archive/>
List-Unsubscribe: <mailto:ietf-smime-request@imc.org?body=unsubscribe>
I've just noticed that there doesn't appear to be anything in CMS which says what you're supposed to do with the content-type attribute when it's present in the signedAttributes. 11.1 says "The content-type attribute specifies the content type of the ContentInfo value being signed in signed-data", but there doesn't appear to be any clear indication of how to apply this when you verify the signature. I know it's obvious, but it'd be a good idea to mention it explicitly, perhaps add to the content-type description or maybe 11.1 something like "Where this field is present, implementations must verify during the signature validation process that it matches the type of the ContentInfo being signed". Peter.
- Whither SignerInfo content-type? Peter Gutmann
- Re: Whither SignerInfo content-type? John Pawling