[openpgp] Re: Fwd: New Version Notification for draft-gall agher-email-invisible-signatures-00.txt
Daniel Kahn Gillmor <[email protected]>
| Newsgroups | gmane.ietf.openpgp |
|---|---|
| Message-ID | <[email protected]> |
On Wed 2025-05-07 22:01:18 +0200, Steffen Nurpmeso wrote:
> May i ask why the hp="clear" parameter was added? Isn't it enough
> to create the Sig: header? The "cryptographic payload" begins
> directly after the Sig: header.
An invisible signature always signs the header fields known to the
sending MUA, as generally recommended in
draft-ietf-lamps-header-protection, which says:
>>> all Header Fields gain end-to-end cryptographic integrity and
>>> authenticity by being copied directly into the Cryptographic Payload
The draft includes the hp="clear" parameter in alignment with that
specification, see:
https://www.ietf.org/archive/id/draft-ietf-lamps-header-protection-25.html#name-content-type-parameter-hp
One curious side effect of this alignment is that it might be possible
to convert a message with an invisible signature into an RFC 3156-style
multipart/signed message. And maybe vice versa?
--dkg
_______________________________________________
openpgp mailing list -- [email protected]
To unsubscribe send an email to [email protected]
signature.asc
(application/pgp-signature, 227 B)
-----BEGIN PGP SIGNATURE----- iHUEARYKAB0WIQRjrBGOWy5dZsiKhad4C4VO2cK0lgUCaBvUbwAKCRB4C4VO2cK0 lqYEAQCnw1UrEZNyAryq/ETKa/CIk+TrwE9aNaUEsX2Ev1hccwD+IXUk90yTAEnG WLgHtF8WwEEGS+/M+FDDV3GhiUfLmgI= =2227 -----END PGP SIGNATURE-----