Re: [debianuser@xxxxxxxxx: GPG: Encrypting messages truncates trailing whitespace]
On Sun, Jan 25, 2004 at 01:01:45PM +0100, Thomas Roessler wrote:
> Strictly according to the spec, it would be entirely legitimate to
> have a text-mode signature that uses a text-modee literal data
> packet to store text with trailing whitespace. It's then the
> verifying program's task to ignore whitespace when verifying a
> signature.
>
> Practically, that's a bad idea, though, because pre-RFC2440 PGP only
> ignores whitespace in "clearsign" signatures -- ordinary text-mode
> signatures created by pre-RFC2440 PGP include trailing whitespace
> when calculating the hash value.
It's actually a little worse than this. The current post-RFC2440 PGP
also includes trailing whitespace. No version of PGP, past or
present, handles this the way it is specified in 2440.
David