From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/59436 Path: main.gmane.org!not-for-mail From: Werner Koch Newsgroups: gmane.emacs.gnus.general Subject: trailing spaces in signed mails Date: Fri, 17 Dec 2004 13:03:17 +0100 Message-ID: <87y8fx9loa.fsf@wheatstone.g10code.de> NNTP-Posting-Host: deer.gmane.org Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=counter-terrorism-mailbomb-Kosovo-Capricorn-event-security-RSA=Juili"; micalg=pgp-sha1; protocol="application/pgp-signature" X-Trace: sea.gmane.org 1103285535 29217 80.91.229.6 (17 Dec 2004 12:12:15 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Fri, 17 Dec 2004 12:12:15 +0000 (UTC) Original-X-From: ding-owner+M7976@lists.math.uh.edu Fri Dec 17 13:12:08 2004 Return-path: Original-Received: from malifon.math.uh.edu ([129.7.128.13] ident=mail) by deer.gmane.org with esmtp (Exim 3.35 #1 (Debian)) id 1CfGxr-0008Bs-00 for ; Fri, 17 Dec 2004 13:12:08 +0100 Original-Received: from localhost ([127.0.0.1] helo=lists.math.uh.edu ident=lists) by malifon.math.uh.edu with smtp (Exim 3.20 #1) id 1CfGuj-0004HW-00; Fri, 17 Dec 2004 06:08:53 -0600 Original-Received: from util2.math.uh.edu ([129.7.128.23]) by malifon.math.uh.edu with esmtp (Exim 3.20 #1) id 1CfGue-0004HR-00 for ding@lists.math.uh.edu; Fri, 17 Dec 2004 06:08:48 -0600 Original-Received: from quimby.gnus.org ([80.91.224.244]) by util2.math.uh.edu with esmtp (Exim 4.30) id 1CfGuX-0007DS-GU for ding@lists.math.uh.edu; Fri, 17 Dec 2004 06:08:41 -0600 Original-Received: from kerckhoffs.g10code.com ([217.69.77.222]) by quimby.gnus.org with esmtp (Exim 3.35 #1 (Debian)) id 1CfGuU-0006AO-00 for ; Fri, 17 Dec 2004 13:08:38 +0100 Original-Received: from uucp by kerckhoffs.g10code.com with local-rmail (Exim 3.35 #1 (Debian)) id 1CfGce-0004gf-00 for ; Fri, 17 Dec 2004 12:50:12 +0100 Original-Received: from wk by localhost with local (Exim 4.32 #1 (Debian)) id 1CfGpJ-0006HV-Hg for ; Fri, 17 Dec 2004 13:03:17 +0100 Original-To: ding@gnus.org Organisation: g10 Code GmbH OpenPGP: id=5B0358A2; url=finger:wk@g10code.com User-Agent: Gnus/5.1006 (Gnus v5.10.6) Emacs/21.3 (gnu/linux) Precedence: bulk Original-Sender: ding-owner@lists.math.uh.edu Xref: main.gmane.org gmane.emacs.gnus.general:59436 X-Report-Spam: http://spam.gmane.org/gmane.emacs.gnus.general:59436 --=counter-terrorism-mailbomb-Kosovo-Capricorn-event-security-RSA=Juili Hi! After the release of gnupg 1.4.0 a lot of people complained that they were not able to verify my signature anymore. The reason for this is due to a change in OpenPGP and thus gpg to not strip trailing white spaces anymore for signing. PGP/MIME (rfc 3156) defines rules on how to protect against this problem (most PGG and OpenPGP implementations did it differently in the past) but these rules are not follwed by mml2015. In particular, rfc 3156 states: Additionally, implementations MUST make sure that no trailing whitespace is present after the MIME encoding has been applied. the example given also states: & Also, in some cases it might be desirable to encode any =20 & trailing whitespace that occurs on lines in order to ensure =20 & that the message signature is not invalidated when passing =20 & a gateway that modifies such whitespace (like BITNET). =20 This message is signed and the "-- " before the signature lines should have been send as "--=20". I suggest to convert the last of a run of trailing spaces to QP. My Gnus version is v5.10.6. Shalom-Salam, Werner -- Werner Koch The GnuPG Experts http://g10code.com Free Software Foundation Europe http://fsfeurope.org --=counter-terrorism-mailbomb-Kosovo-Capricorn-event-security-RSA=Juili Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) iEYEABECAAYFAkHCywUACgkQYHhOlAEKV+3qpgCggjx1C1xbjQlrMUXs8My/eWXY 2o0AoM0G1V0Xn6jP1RRYCdNLlkT78lds =t0aQ -----END PGP SIGNATURE----- --=counter-terrorism-mailbomb-Kosovo-Capricorn-event-security-RSA=Juili--