[Enigmail] Any chance of X-PGP-Sig support?

Phil Stracchino alaric at metrocast.net
Mon Dec 17 06:33:42 PST 2007


Andrzej Filip wrote:
> John Clizbe wrote:
>> Andrzej Filip wrote:
>>> Are there any chances for enigmail support of X-PGP-Sig standard?
>>>
>>> 1) It allows to sign selected headers and body of "single part"
>>> text/plain messages.
>>> 2) It is fully contained in headers so unlike other signing standards it
>>> is "invisible" to news/mail readers not supporting it
>>>
>>> IMHO it is the best format (I know) for signing Usenet posts.
>> I don't know if it's very likely until it's covered by a RFC.
> 
> A new format of signing email messages is required anyway.
> Which of the formats supported by enigmail can sign "main RFC822/RFC2822
> headers"? [ e.g. subject, from, date, message-id, references ]
> 
> The idea that only message *body* is worth to be signed is a needless
> self imposed limitation (IMHO).


Off topic:
I've pondered various times the idea of mailservers signing certain key
headers in each message they originate or relay.  It would enable
unambiguous identification of the real source or injection point of any
spam with headers forged to conceal its origin.  If spammers can't hide
where their mail is originating from, they can't evade anti-spam laws,
which would make it a lot easier to use those laws against them.

'Course, I know plenty of people who say it's time for a whole new mail
protocol, with end-to-end authentication built in from the start.


-- 
  Phil Stracchino, CDK#2         ICBM: 43.5607, -71.355
  Renaissance Man, Unix ronin, Perl hacker, Free Stater
  alaric at caerllewys.net            alaric at metrocast.net
          It's not the years, it's the mileage.


More information about the Enigmail mailing list