Signing problems...

[Ted Cabeen]

In message <200006190600.IAA02149 at dwimc.xsoft.at>, Alexander Zangerl writes:
>On Fri, 16 Jun 2000 15:28:02 CDT, Ted Cabeen writes:
>>I found the bug.  With the above command line, GPG chokes on input lines that
>>end in a space character.  It will generate a signature, but that signature
>>will not match the original text, with the trailing space.
>
>i've run into a similar problem in february, see 
><URL:http://lists.gnupg.org/gnupg-devel-200002/msg00026.html>.
>
>personally i think your problem is the same as mine, i.e. that
>gpg does strip trailing whitespace correctly when signing
>but not when checking the signature.

You're right.  The question is what do we do with this bug?  Is there a flag 
in the PGP signature spec that informs the client that this mode is on?  What 
do the other clients do?  I fear that even if GnuPG correctly generates the 
signature, other OpenPGP clients will not know that we were in this mode, and 
will have the same problems that gpg is currently having.  

According to the docs, -t is used for backward compatibility.  Does it have 
any other uses?  What circumstances should I use -t or --textmode in?

--
Ted Cabeen           http://www.pobox.com/~secabeen         secabeen at pobox.com
Check Website or finger for PGP/GPG Public Key           secabeen at uchicago.edu
"I have taken all knowledge to be my province." -F. Bacon  secabeen at cabeen.org
"Human kind cannot bear very much reality."-T.S.Eliot        cabeen at netcom.com


-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 240 bytes
Desc: not available
Url : /pipermail/attachments/20000619/8dda08c9/attachment.bin