Cryptography (was: Re: draft-klensin-emailaddr-i18n-00)

Paul Hoffman / IMC writes:
> At 11:23 AM +0100 10/27/03, Arnt Gulbrandsen wrote:
>> Oh please, not _another_ obstacle to signature support. The state is 
>> bad enough as it is - we really don't need more obstacles.
>
> Again: this has nothing to do with "signature support". The headers in 
> email messages are *not* covered by the signature (or by encryption).

Sorry, I misunderstood then. I thought this (also?) applied to body text.

But my point stands (in the case of sanely designed MUAs). When a 
message/rfc822 is contained by a multipart/signed, a header is 
signed/encrypted. Any code that treats a top-level message like a 
message/rfc822 bodypart will need to deal with the 
signature/normalization problems for the header as well as for the 
body.

--Arnt