"alessio.soldano(a)jboss.com" wrote :
| We might strip out CR from messages before signing but that would be a poor fix since
thirdparty implementations could still produce signatures over messages containing CRs.
|
Stripping out the CR character from such elements violates the message integrity.
View the original post :
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4131907#...
Reply to the post :
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...