X-Spam-Check-By: sourceware.org
From: "Dave Korn" <dave DOT korn AT artimi DOT com>
To: <cygwin AT cygwin DOT com>
Subject: RE: Is cygwin-ml softwere altering message content?
Date: Fri, 18 Aug 2006 15:11:36 +0100
Message-ID: <00e801c6c2d0$37485070$a501a8c0@CAM.ARTIMI.COM>
MIME-Version: 1.0
Content-Type: text/plain; 	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 11
In-Reply-To: <44E5B4C8.9050206@ukf.net>
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Precedence: bulk
List-Unsubscribe: <mailto:cygwin-unsubscribe-archive-cygwin=delorie DOT com AT cygwin DOT com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

On 18 August 2006 13:39, Max Bowsher wrote:

> The RFCs indicate that it is the encoded form which is signed and verified.

  <boggle>  You're kidding!  No wonder it's so fragile.  I'd consider it bad
architecture to sign/verify a non-canonical representation.

> The problem is that the sourceware mailer is decoding the MIME part and
> re-encoding it into a subtly different form.
> 
> It's irrelevant that the two encoded forms happen to decode to the same
> result, since it is the encoded form which is signed.

  Yes, of course it is in that case.

> I feel I do fully understand the situation.

  So do I.  You should definitely have a word with overseers, although there
may be some good reason for the reformatting, perhaps related to the
requirements of the web archives.  We'll just have to see.

> Are you saying that you got a verification error for my message with
> Message-ID <44E46C29 DOT 3050005 AT ukf DOT net> ?
> That would be bizarre, since it verifies fine for me.

  Yeh, but it's just down to Outlook munging the text when it exports it.  Why
can't M$ software ever just save your data, rather than tampering with it
because it thinks it knows better than you what it should be?  Feh!

    cheers,
      DaveK
-- 
Can't think of a witty .sigline today....


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/