4 ms·

Adding Signatures to an existing document, no matter the format is just a whole bunch of trouble.

• maxbond 2y ago
  To expand, generally you wouldn't want to change the identity of the document by signing it (eg change it's hash). That's bananas. If the signature was external to the document, you wouldn't need any complex and error prone rules to canonicalize. You'd just generate an HMAC tag and send it alongside (or, better yet, use an authenticated encryption like AES-GCM).
  • jahewson 2y ago
    The sane thing is to sign bytes, as you suggest. But OP is right that it needs to preclude adding signatures to a document.