Signing problems...

[Ted Cabeen]

--==_Exmh_610614494P
Content-Type: text/plain; charset=us-ascii

In message <200006190600.IAA02149@dwimc.xsoft.at>, Alexander Zangerl writes:
>On Fri, 16 Jun 2000 15:28:02 CDT, Ted Cabeen writes:
>>I found the bug.  With the above command line, GPG chokes on input lines that
>>end in a space character.  It will generate a signature, but that signature
>>will not match the original text, with the trailing space.
>
>i've run into a similar problem in february, see 
><URL:http://lists.gnupg.org/gnupg-devel-200002/msg00026.html>.
>
>personally i think your problem is the same as mine, i.e. that
>gpg does strip trailing whitespace correctly when signing
>but not when checking the signature.

You're right.  The question is what do we do with this bug?  Is there a flag 
in the PGP signature spec that informs the client that this mode is on?  What 
do the other clients do?  I fear that even if GnuPG correctly generates the 
signature, other OpenPGP clients will not know that we were in this mode, and 
will have the same problems that gpg is currently having.  

According to the docs, -t is used for backward compatibility.  Does it have 
any other uses?  What circumstances should I use -t or --textmode in?

--
Ted Cabeen           http://www.pobox.com/~secabeen         secabeen@pobox.com
Check Website or finger for PGP/GPG Public Key           secabeen@uchicago.edu
"I have taken all knowledge to be my province." -F. Bacon  secabeen@cabeen.org
"Human kind cannot bear very much reality."-T.S.Eliot        cabeen@netcom.com



--==_Exmh_610614494P
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.1 (SunOS)
Comment: Exmh version 2.1.2 06/08/2000

iEYEARECAAYFAjlOL8EACgkQoayJfLoDSdL4FgCeNb72s155pzEo1VfPQijzS59Q
ix0An0TdK3wAAA2GNbB6/A1fENM5XUrY
=0pBd
-----END PGP SIGNATURE-----

--==_Exmh_610614494P--