Re: Linux Kernel Summit

On Mon, 2 Apr 2001, Greg Hudson wrote:
> > HTTP digest authentication does this; it uses MD5 checksums for
> > request and response bodies.
>
> But we're not looking for authentication; we're looking for protection
> against accidental data corruption.

Imprecise wording: Content-MD5 is the header that HTTP provides for
checksumming, and it is not related to authentication. Also, realize that
it refers to the "canonical form" of the entity, not the encoded form, in
case any MIME encoding is being done during transit (or something like
converting newline characters).

        Brian
Received on Sat Oct 21 14:36:27 2006