How does one implement it correctly? Add the signatures after generating the actual octet stream, and then apply a suitable Content-Transfer-Encoding afterwards? -- Florian Weimer Weimer@xxxxxxxxxxxxxxxxxxxxx University of Stuttgart http://CERT.Uni-Stuttgart.DE/people/fw/ RUS-CERT +49-711-685-5973/fax +49-711-685-5898