Antw: Security hole: Digital Signing + Downloadable fonts

[plipp <plipp@xxxxxxxxxxxxxxxxxx>]

>Solution would be to sign the aggregate of all the resources recursively
>referenced. Whether this should be the default behaviour, I would say yes
>(as to "display" them you have them all in memory anyway).

We are allowing several resources within to be included one signature. However,
the user, or better the signing application, needs to be fully aware which
resources are to be included in that list, such as the font in your example.

What you consider the default behaviour is clearly application-dependent.
Our view of a signature is not limited to ordering etc.

Peter



Peter Lipp, IAIK, University of Technology, Graz
Institute for Applied Information Processing and Communications
Klosterwiesgasse 32/I, A-8010 Graz, +43 316 873 5513
________________________________________________________________________
Was nützt die beste Erziehung, die Kinder machen uns ja doch alles nach.