Re: [integrity] What should we hash?

On 11 Apr 2014, at 3:56 am, Devdatta Akhawe <dev.akhawe@gmail.com> wrote:

> Mark said:
>> --8<--
>> The hash is calculated against the representation <http://tools.ietf.org/html/draft-ietf-httpbis-p2-semantics-26#section-3.1.1.5> without any content-codings applied, except when there is an explicit flag that the content is to be consumed with content-encodings (e.g., saving a gzip'd file to disk).
>> -->8---
> 
> Oops! Yeah, you are right and you had already clarified this. That was
> a mistake in my email. Sorry about that. Although, I don't know what
> you mean by "explicit flag" above. Whats the explicit flag when
> gzip'ed files are downloaded?

'explicit flag' may be the wrong phrase -- maybe "expressed intent by the user or origin"?

--
Mark Nottingham   http://www.mnot.net/

Received on Thursday, 10 April 2014 22:16:12 UTC