[openpgp] Re: Fwd: New Version Notification for draft-gall agher-email-unobtrusive-signatures-00.txt

Hiya,

On 14/05/2025 09:38, Michael Richardson wrote:
> 
> Stephen Farrell <[email protected]> wrote:
>      > One specific (technical, not IETF politics) question I'd have about
>      > the basic idea is: how does this compare with DKIM and esp. the
>      > proposed DKIM2 work? The goals of DKIM and this are qiute different,
> 
> Is there a two paragraph summary of DKIM2?

Not one that's uncontroversial;-(

The WG charter is [1]. Main point is DKIM adds signatures to
the envelope as mail header fields, so if we're also proposing
to do that in another way, we should do some due-diligence.
DKIM2 is also proposing an algorithm to "unwind" some of the
changes that may occur to mail in transit (e.g. mailing list
footers) so one can validate a signature from before those
changes were made. If we create new mails with multipart/mixed
those might interact with that still-being-developed algorithm.

Hopefully the result of checking that would be that there are
no issues, but were it the case that this proposed openpgp
scheme caused DKIM failures, I suspect that'd be bad for this
scheme.

> 
> I personally feel some pain from people not understanding 'signature.asc'
> attachments, but not a huge amount.

Ditto. Though it does "break" things when people say they
can't read your signed emails because of that, so it is a
real issue.

Cheers,
S.

[1] https://datatracker.ietf.org/wg/dkim/about/

> 
> --
> Michael Richardson <[email protected]>, Sandelman Software Works
>   -= IPv6 IoT consulting =-                      *I*LIKE*TRAINS*
> 
> 
>

_______________________________________________
openpgp mailing list -- [email protected]
To unsubscribe send an email to [email protected]

-----BEGIN PGP SIGNATURE-----

wnsEABYIACMWIQQwbnhHy1kPJkWsM6fk2On5l6gz3QUCaCRr8QUDAAAAAAAKCRDk2On5l6gz3XEg
AQC4jbug/tI3vUk39CcEv9nSxu2/7CfpxVCejkS1aEHIEAEAzdRNjZ5wASfmJNtFlKLivEho9F7/
oJywW8CwM7ljCQ8=
=zQAL
-----END PGP SIGNATURE-----