BugTraq
Re: base64 Sep 25 2003 01:06PM
MightyE (trash mightye org) (1 replies)
Re: base64 Sep 25 2003 03:30PM
Bennett Todd (bet rahul net) (3 replies)
Re: base64 Sep 25 2003 11:46PM
Earl Hood (earl earlhood com) (2 replies)
On September 25, 2003 at 11:30, Bennett Todd wrote:

> There's a third method, which I think is rather better than either
> of those.
>
> You can re-code everything into a canonical form. Some email client
> drop some punctuation characters in filenames? Delete all such
> characters from filenames. Different tools handle various i18n
> encoded filenames differently? Map to US-ASCII. Enforce length
> limits. Recode base64. Recode uuencoded chunks. Regularize
> non-standard MIME.

You cannot do this for signed messages, therefore, you still
need to either decode in all possible ways or drop the message
(or the offending entity).

--ewh

[ reply ]
Re[2]: base64 Sep 26 2003 06:02PM
3APA3A (3APA3A SECURITY NNOV RU)
Re: base64 Sep 26 2003 05:08PM
Bennett Todd (bet rahul net)
RE: base64 Sep 25 2003 08:20PM
Alun Jones (alun texis com) (1 replies)
Re: base64 Sep 26 2003 06:11PM
Bennett Todd (bet rahul net)
Re: base64 Sep 25 2003 06:21PM
MightyE (trash mightye org)


 

Privacy Statement
Copyright 2010, SecurityFocus