Re: [ietf-dkim] Re: WG Review: Domain Keys Identified Mail (dkim)

[Dave Crocker <dhc at dcrocker.net>]

> 'nowsp' canonicalization does not exist in "DKIMv2" (-base-01).  It was
> eliminated, rather than deprecated, because it created a vulnerability. 

sorry. i had misunderstood that line of discussion.  and, yes, 
vulnerability counts as a showstopper.


> While some -base-01 verifiers may implement legacy nowsp support, a
> fully compliant -base-01 verifier may not work with a -base-00 signature
> that uses nowsp canonicalization.

ack.

that still leaves useful over-the-wire compatibility, doesn't it?

d/

--

 Dave Crocker
 Brandenburg InternetWorking
 +1.408.246.8253
 dcrocker  a t ...
 WE'VE MOVED to:  www.bbiw.net

_______________________________________________
Ietf mailing list
Ietf at ietf.org
https://www1.ietf.org/mailman/listinfo/ietf