Bugtraq mailing list archives

Re: base64


From: Earl Hood <earl () earlhood com>
Date: Thu, 25 Sep 2003 18:46:36 -0500

On September 25, 2003 at 11:30, Bennett Todd wrote:

There's a third method, which I think is rather better than either
of those.

You can re-code everything into a canonical form. Some email client
drop some punctuation characters in filenames? Delete all such
characters from filenames. Different tools handle various i18n
encoded filenames differently? Map to US-ASCII. Enforce length
limits. Recode base64. Recode uuencoded chunks. Regularize
non-standard MIME.

You cannot do this for signed messages, therefore, you still
need to either decode in all possible ways or drop the message
(or the offending entity).

--ewh


Current thread: