← Feed

Posts

• View post

  What do they suggest for the secure way to validate the header line? Let's say it is `Hash: SHA1` and then a million `nbsp` and then a newline Is the header line now considered invalid because of arbitrary character limit? Is it invalid because the maximum length of a known hash function is (insert figure here)? Should the million `nbsp` be a part of the text being signed?

• View post

  At 09:10 - they demonstrate injecting text that does not break signatures - by appending text after manually inserting null terminator. - Is null terminator a character that can be inserted using any enhanced text editor? How do I do that in vim? - They go on to say that \v\r is not a new line - but actually I thought that Unix style of text documents end a line that way (\r)?