X-Spam-Check-By:	sourceware.org
From:	"Dave Korn" <dave DOT korn AT artimi DOT com>
To:	<cygwin AT cygwin DOT com>
Subject:	RE: Is cygwin-ml softwere altering message content?
Date:	Fri, 18 Aug 2006 15:11:36 +0100
Message-ID:	<00e801c6c2d0$37485070$a501a8c0@CAM.ARTIMI.COM>
MIME-Version:	1.0
X-Mailer:	Microsoft Office Outlook 11
In-Reply-To:	<44E5B4C8.9050206@ukf.net>
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Unsubscribe:	<mailto:cygwin-unsubscribe-archive-cygwin=delorie DOT com AT cygwin DOT com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com

On 18 August 2006 13:39, Max Bowsher wrote:

> The RFCs indicate that it is the encoded form which is signed and verified.

  <boggle>  You're kidding!  No wonder it's so fragile.  I'd consider it bad
architecture to sign/verify a non-canonical representation.

> The problem is that the sourceware mailer is decoding the MIME part and
> re-encoding it into a subtly different form.
> 
> It's irrelevant that the two encoded forms happen to decode to the same
> result, since it is the encoded form which is signed.

  Yes, of course it is in that case.

> I feel I do fully understand the situation.

  So do I.  You should definitely have a word with overseers, although there
may be some good reason for the reformatting, perhaps related to the
requirements of the web archives.  We'll just have to see.

> Are you saying that you got a verification error for my message with
> Message-ID <44E46C29 DOT 3050005 AT ukf DOT net> ?
> That would be bizarre, since it verifies fine for me.

  Yeh, but it's just down to Outlook munging the text when it exports it.  Why
can't M$ software ever just save your data, rather than tampering with it
because it thinks it knows better than you what it should be?  Feh!

    cheers,
      DaveK
-- 
Can't think of a witty .sigline today....


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -