- From: Tom Gindin <tgindin@us.ibm.com>
- Date: Tue, 15 May 2001 07:36:47 -0400
- To: "Gregor Karlinger" <gregor.karlinger@iaik.at>
- Cc: <w3c-ietf-xmldsig@w3.org>
I would like to require the escaping of all ASCII controls in DN's in XMLDSIG (I was not precise enough last time, and what I said could have been interpreted as having wider scope) because otherwise standard trimming routines may eliminate characters which somebody left in a DN intentionally, as is permitted by RFC 2253. It is my impression that standard trimming routines tend to remove horizontal tab, for example, in the same positions where they remove space. Tom Gindin "Gregor Karlinger" <gregor.karlinger@iaik.at> on 05/15/2001 07:10:53 AM To: Tom Gindin/Watson/IBM@IBMUS cc: <w3c-ietf-xmldsig@w3.org> Subject: AW: AW: KeyName white space Tom, [...] > require it to start with an alphanumeric, trimming any leading whitespace > would be safest. Yes, and this requirement should be stated in XML-Signature. > So I think considering unescaped spaces at either end of a DN to be > part of it is actually in violation of RFC 2253. However, and very > strangely, no similar requirement exists for horizontal tab or line feed, > while carriage return must be escaped according to RFC 1779 but not 2253. > Should we require that XMLDSIG implementations escape all ASCII control > characters as well? Why would you like to require such an escaping? Liebe Gruesse/Regards, --------------------------------------------------------------- DI Gregor Karlinger mailto:gregor.karlinger@iaik.at http://www.iaik.at Phone +43 316 873 5541 Institute for Applied Information Processing and Communications Austria ---------------------------------------------------------------
Received on Tuesday, 15 May 2001 07:37:18 UTC