[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Outstanding question - rule on cleartext signing last line
On Mon, Dec 26, 2005 at 12:29:15PM +0000, Ben Laurie wrote:
>
> David Shaw wrote:
> > On Thu, Dec 08, 2005 at 01:23:01PM +0100, Werner Koch wrote:
> >> On Thu, 08 Dec 2005 11:43:48 +0000, Ian G said:
> >>
> >>> But I think we need to hear from the PGP Inc and GPG
> >>> architects on this?
> >> I recall that we tweaked gpg's behaviour in this regard until all
> >> users were satisfied. Thus I'd say not to add new requirement to the
> >> specs.
> >
> > I agree. I think the spec is just fine in this regard: the final CRLF
> > (the one before the "-----BEGIN PGP SIGNATURE-----") is not part of
> > the signature. That allows for the GPG behavior to preserve the
> > presence or lack of line ending on the last line.
>
> However, it doesn't. This strikes me as a bug both in GPG and in the spec.
Yes it does. GPG behaves slightly differently with messages entered from the
console, but that makes a lot of sense, too. I don't see any bugs in either
the specs and GPG. I have coded up my own OpenPGP implementation based on
the spec (http://pgp.epointsystem.org/tool) and it interoperates perfectly
with GPG.
--
Daniel