[openpgp] Re: Fwd: New Version Notification for draft-gall agher-email-invisible-signatures-00.txt

On Sat 2025-05-03 15:46:00 -0400, Michael Richardson wrote:
> Andrew Gallagher <[email protected]> wrote:
>
>> Instead of including the signature as an attachment, we propose that
>> the signature is contained within a novel MIME header in the top-level
>> MIME part. The principal advantage of this is that naive MUAs should
>> silently ignore unknown MIME-part headers, which addresses the “unknown
>> attachment” UX problem when using traditional PGP/MIME.
>
> okay, I like the idea of fixing the UX problem.
> I'm not sure how popular the solution will be, I'm totally willing to try.
>
> Let's adopt this if we can.

It looks to me like you're asking for working group adoption, Michael.

As a co-editor of the draft, and as co-chair of the working group, i'm
in a delicate position here, so i'll defer to my co-chair Stephen
Farrell on whether it's appropriate for this WG or not.

There's not much in this draft that touches on the OpenPGP framing at
all; pretty much the only use it makes of the wire format is to expect
implementations to be able to:

1. isolate a single OpenPGP signature packet per `Sig` header field, and

2. base64-encode such a packet without any formal OpenPGP "ASCII armor"
   framing

Given this, i'm inclined to say that this belongs more in a
mail-oriented WG, not in the OpenPGP WG.  Perhaps that's MAILMAINT or
LAMPS.

At any rate, if we can't decide on a reasonable venue up front, i'd be
happy to shop this around at SECDISPATCH in this summer's IETF,
particularly if we have a couple implementations that can demonstrate
interoperable signing and verification.

              --dkg

_______________________________________________
openpgp mailing list -- [email protected]
To unsubscribe send an email to [email protected]

-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQRjrBGOWy5dZsiKhad4C4VO2cK0lgUCaBkFNgAKCRB4C4VO2cK0
lnx1AP99XJWwBaXuuF2DLVf/53G2xlDimFN7j469B2Y2sWzmWwEA/gVmJNdmZx3a
/Yjj02aXuLpZsPaQky9XWrzFG2uyOAE=
=/6NL
-----END PGP SIGNATURE-----