[openpgp] Re: Specifying OpenPGP file extensions (and MIME type)?

Daniel Huigens wrote in
 <Ts1QHIUYB28BAuFGcEAlziUv2P8z-9l3cvoIWqQP-LoGulOruNn15YUv1996s--1DZEm08n\
 [email protected]>:
 |On Wednesday, December 18th, 2024 at 16:42, Andrew Gallagher wrote:
 |
 |> I’d prefer to go in the other direction. Why do we have different \
 |> grammars for messages and certificates? It prevents us from doing \
 |> really simple stuff like appending a certificate to a message. If \
 |> a message is a sequence of packets and a certificate is a sequence \
 |> of packets - let’s just define an “OpenPGP packet sequence” and let \
 |> the OpenPGP layer deal with the nuances of “message” vs “keyring” \
 |> (certificate-ring?).
 |
 |Hmm. I'm not sure I agree; if you want to put a certificate in a message
 |then you can just do that, put the certificate inside the (encrypted/
 |signed) message (e.g. as an attachment in the email context).
 |That seems cleaner to me.

It is a good thing imho that you all do that now.
IETF SML does not seem to fly, but in this hindsight an
automatable solution appears attractive to me.  Ie "a real
autocrypt thing" in that i can take it for granted if a signed
message includes such a part.  (Ie it seems it cannot be as "hard"
a relationship as with S/MIME and the extractable public key, but
providing a "hard guarantee", isn't that desirable.)

 |There may be some sunk cost fallacy on my side as we spent a bunch of
 |effort in OpenPGP.js to make the parsing more strict / adhere to the
 |grammar more closely, e.g. `readMessage()` now throws if it includes a
 |key packet, and `readKey()` throws if it includes a data packet. While
 |this reduces flexibility in some sense, it also leads to better error
 |messages when you accidentally pass the wrong thing, for example.

--steffen
|
|Der Kragenbaer,                The moon bear,
|der holt sich munter           he cheerfully and one by one
|einen nach dem anderen runter  wa.ks himself off
|(By Robert Gernhardt)
|
|And in Fall, feel "The Dropbear Bard"s ball(s).
|
|The banded bear
|without a care,
|Banged on himself for e'er and e'er
|
|Farewell, dear collar bear

_______________________________________________
openpgp mailing list -- [email protected]
To unsubscribe send an email to [email protected]