Bugzilla

(In reply to Max Emig from comment #10)
> If you decide that you actually want this, I would implement the following part of the RFC 6367 spec, intended for accurate DKIM validation:
> ```

Note you have a typo, the correct RFC number is 6376:
https://www.rfc-editor.org/info/rfc6376/#section-3.4.3

And FYI, we're proposing the same in the unobtrusive specification:
https://www.ietf.org/archive/id/draft-ietf-mailmaint-unobtrusive-signatures-02.html#name-canonicalization

And it's implemented already for the signature calculation and verification part when creating and processing messages with that structure:
https://hg-edge.mozilla.org/comm-central/rev/7f9b00b0122a#l3.232
https://hg-edge.mozilla.org/comm-central/rev/dbee5a3fd41e#l9.55


> I can build this, but I can't take away the decision whether you actually want this. I would also suggest adding a way to opt-out of this via about:config.

Great!

I think it's a good idea to be able to control that using a hidden preference while testing, but it feels like the pref could get removed after a few months of testing. We'll see.

(In reply to Max Emig from comment #10)
> If you decide that you actually want this, I would implement the following part of the RFC 6367 spec, intended for accurate DKIM validation:


Note you have a typo, the correct RFC number is 6376:
https://www.rfc-editor.org/info/rfc6376/#section-3.4.3

And FYI, we're proposing the same in the unobtrusive specification:
https://www.ietf.org/archive/id/draft-ietf-mailmaint-unobtrusive-signatures-02.html#name-canonicalization

And it's implemented already for the signature calculation and verification part when creating and processing messages with that structure:
https://hg-edge.mozilla.org/comm-central/rev/7f9b00b0122a#l3.232
https://hg-edge.mozilla.org/comm-central/rev/dbee5a3fd41e#l9.55


> I can build this, but I can't take away the decision whether you actually want this. I would also suggest adding a way to opt-out of this via about:config.

Great!

I think it's a good idea to be able to control that using a hidden preference while testing, but it feels like the pref could get removed after a few months of testing. We'll see.