Compression Order

"David Fischer" <[email protected]> Tue, 5 Mar 2002 11:42:50 -0600
Newsgroups gmane.ietf.ediint
Message-ID <[email protected]>
AS3?...We are beginning to implement the Compression Draft
specification:

http://www.ietf.org/internet-drafts/draft-ietf-ediint-compre
ssion-00.txt

and an implementation decision has arisen.  When Compression
is applied in concert with Signatures, which should be
applied first?

    Compress + Sign    or
    Sign + Compress

        and

    Compress + Sign + Encrypt   or
    Sign + Compress + Encrypt

Different companies have presented valid business cases for
each alternative.

The advocates for Signing first desire the signature to be
over readable text (you know what you are signing -- which
is why we never Sign after Encrypting).

The advocates for Compressing first desire performance
improvements.  In this case, Compression is compared as just
another encoding scheme so it is really still plain text.

Discussions thus far have resulted in a consensus that the
implementors should be able to apply these functions in
either order when sending.  When receiving, the
implementations should be able to process either case.

We are looking for further discussions. . .

Regards,

David Fischer
Drummond Group.