[Enigmail] Any chance of X-PGP-Sig support?
Robert J. Hansen
rjh at sixdemonbag.org
Mon Dec 17 06:40:05 PST 2007
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Andrzej Filip wrote:
> There are *de facto* standards. AFAIK X-PGP-Sig has been used to sign
> Usenet control messages [create/delete group].
Compare and contrast the number of inline RFC4880 signatures to
X-PGP-Sig signatures and then tell me which is the de facto standard.
> About exactly which part of rfc4880 you talk about?
> http://www.ietf.org/rfc/rfc4880.txt
I am not going to save you from the burden of reading the OpenPGP RFC.
Inline OpenPGP has been well established since the earliest days of
RFC2440 (even RFC1991 if you want to go back to ClassicPGP) and compares
quite favorably to PGP/MIME (RFC3156).
> Which part of it describes how to sign email/news messages in a way:
> 1) "fully invisible" to almost all news/email readers not supporting
> it 2) capable to sign subset of "main RFC822/RFC2822 headers"
None. The necessity for neither has been well-established.
> A new format of signing email messages is required anyway.
If you think so, then the proper place to address this is to the IETF's
OpenPGP working group. X-PGP-Sig is not part of the IETF's OpenPGP RFCs
and for that reason it is very unlikely Enigmail will support it. As
soon as it becomes part of an IETF OpenPGP RFC, then it is very likely
Enigmail will support it.
> The idea that only message *body* is worth to be signed is a needless
> self imposed limitation (IMHO).
Convince the IETF OpenPGP WG, not us.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iFYEAREIAAYFAkdmikUACgkQf2XByo0Cu7PQ4gDghYPwwF6IQ/cUnAPIvGEPXcLf
LJAA2DRG5duqlQDfUF92O3IkySFkAJY9dGzPLozrtJkubDdPbYOXLokBHAQBAQgA
BgUCR2aKRQAKCRC3APSC/q+BCYkzCACYlUL/CaBdwTXBweRri+InR0vLmOipowwP
Tr70ApSuLP4Ij3998bgUcucM079vWyQpGJmMd+Eq0vbSfJNFzdarbEE/YIqil9dJ
Uwwhelzz50PZNBV+V3pD6jIdb8yY7IGg8FCQTkN5iUg/csqre34+fkmmTAa3kgX2
fl8n0yiGDWHkMR212NUBLUEybOUvu6N4sid8805j1WJ8BOIY0zdix6Y+syoYoxTd
nG9fs9zoEyGKAMx+3fwUVzAxwkIXZAc8jMy6LsIcpACrI57BQjteygd4Kb8IJPy9
wqknJp5c0uCM7HrwUk19K/pfhN3ZwtNH76YJ7600DvzwB9TtQRw1
=0y39
-----END PGP SIGNATURE-----
More information about the Enigmail
mailing list