[Dovecot] SIS Implementation

[Timo Sirainen]

On Aug 14, 2009, at 8:39 PM, WJCarpenter wrote:

> These days, standardized digitial signature schemes take into  
> account legal transformations that can happen during message  
> transmission.  Most of them have a canonicalization formula so that  
> things still work.  However, in early days, various schemes didn't  
> take that into account.  Luckily, MTAs typically didn't rearrange  
> anything even if they were legally allowed to.

Are you sure that really works with e.g. PGP signatures? A quick look  
at RFC 3156 seems to say that the data inside multipart/signed really  
shouldn't be touched in any way.