[openpgp] Fwd: New Version Notification for draft-gallagher- email-invisible-signatures-00.txt

Andrew Gallagher <[email protected]> Sat, 3 May 2025 11:54:46 +0100

Newsgroups	gmane.ietf.openpgp
Message-ID	<[email protected]>

Hi, all.

I have just uploaded a first draft that specifies a potential replacement for cleartext-signed MIME email. This arose from one of the discussions at the 9th OpenPGP Email Summit last month, where DKG, Kai and I agreed to draw up a proposal based on the views expressed by the attendees.

Instead of including the signature as an attachment, we propose that the signature is contained within a novel MIME header in the top-level MIME part. The principal advantage of this is that naive MUAs should silently ignore unknown MIME-part headers, which addresses the “unknown attachment” UX problem when using traditional PGP/MIME.

While this proposal only specifies an OpenPGP message format, it should be extensible to similar signed-only MIME formats.

Comments welcome!

Thanks,
Andrew.

> Begin forwarded message:
> 
> From: [email protected]
> Subject: New Version Notification for draft-gallagher-email-invisible-signatures-00.txt
> Date: 3 May 2025 at 11:44:52 IST
> To: "Andrew Gallagher" <[email protected]>, "Daniel Gillmor" <[email protected]>, "Daniel Kahn Gillmor" <[email protected]>, "Kai Engert" <[email protected]>
> 
> A new version of Internet-Draft
> draft-gallagher-email-invisible-signatures-00.txt has been successfully
> submitted by Andrew Gallagher and posted to the
> IETF repository.
> 
> Name:     draft-gallagher-email-invisible-signatures
> Revision: 00
> Title:    Invisible End-to-End E-mail Signatures
> Date:     2025-05-02
> Group:    Individual Submission
> Pages:    19
> URL:      https://www.ietf.org/archive/id/draft-gallagher-email-invisible-signatures-00.txt
> Status:   https://datatracker.ietf.org/doc/draft-gallagher-email-invisible-signatures/
> HTMLized: https://datatracker.ietf.org/doc/html/draft-gallagher-email-invisible-signatures
> 
> 
> Abstract:
> 
>   This document deals with end-to-end cryptographically signed e-mail.
>   It introduces a novel structure for signed e-mail that is designed to
>   avoid creating any disturbance in legacy e-mail clients.  This
>   "invisible" signature structure removes disincentives for signing
>   e-mail.
> 
> 
> 
> The IETF Secretariat
> 
>

_______________________________________________
openpgp mailing list -- [email protected]
To unsubscribe send an email to [email protected]

signature.asc (application/pgp-signature, 833 B)