[Enigmail] official protocol for external helper program
Robert J. Hansen
rjh at sixdemonbag.org
Wed Dec 19 07:31:02 PST 2007
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Andrzej Filip wrote:
> Is there any chance for enigmail to support some official protocol for
> messages signing/encrypting and verification of message signature?
If you are asking "is there any chance of someone else doing this for
me", the answer is "not right now, and probably not for a while."
Patrick is quite busy with bug fixes and UI changes. I, for one, would
much rather Patrick spend his time bringing Enigmail towards a 1.0
release than I would have him spend his time on features that have only
one vocal supporter.
If you are asking "I am willing to write this support, how do I get my
changes adopted by Enigmail", the following is a rough guideline:
1. Write the code (easiest part).
1a. Write a requirements and design doc. (Easy, but nobody seems
to actually do it.)
1b. Document the code. (Ditto.)
2. Do regression testing to make sure you haven't broken any of
Enigmail's existing functionality (hard, since we have no official
regression test suite--we should look into that)
3. Package your change up as an XPI and announce it on this mailing
list.
4. Early adopters and volunteers will begin to use your XPI. They
will discover a ton of bugs and edge cases you never thought of.
5. Fix the bugs and edge cases. Keep your XPI active and tracking
the latest Enigmail for six months.
6. Six months later, submit your changes to Patrick. Also submit
to him all outstanding bug tickets and known issues. At this point
you become Patrick's Very Favorite Person, since you will have
submitted to him stable code with engineering documentation and a
user community which supports it.
7. If Patrick likes your code (very likely, if you do all of 1-6),
Patrick may ask you to submit to him a change-of-copyright form
transferring ownership of the code to him. Some FOSS projects do
this, some don't.
8. Your code gets incorporated into Enigmail. The rest of the
Enigmail team will begin to change webpages, user documentation,
UI, and every other thing imaginable needed to incorporate your
code into Enigmail proper and form a polished product.
> I have asked for support of "X-PGP-Sig:" but I will be happy to use more
> general solution.
You asked for it in 2004 and were told by Patrick "I would be happy to
include it if someone wrote a patch". You've asked for it again. In
neither 2004 nor 2007 did X-PGP-Sig get "yeah, me too!"s from the
Enigmail community. Also, in 2004 Patrick pointed out some serious
problems with the X-PGP-Sig protocol, problems which have not been fixed
in the last three years--which makes me think even the protocol authors
have abandoned it.
I think X-PGP-Sig is a dead letter at this point.
> [e.g. execute external program, feed it XML via its stdin, read XML it
> produces via stdout and error/report via stderr.
This sounds like a completely separate tool as opposed to part of Enigmail.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iFYEAREIAAYFAkdpOTUACgkQf2XByo0Cu7PuAgDghduEIvcnuMqHckghSJb5fAbB
+/YSHCLn2JJFzgDfQn1RSq8Jy44bgKYn+G+jBgQB5pTDlJI4nnO1o4kBHAQBAQgA
BgUCR2k5NQAKCRC3APSC/q+BCRJkCACdYrxury629vwgZRxsUTp5yuc7sXtc/nRv
22xLZzZsBrzT2ggobiiWX5EVTkx+rSF3BvP2q8dVjSSWHHztoTC4cDvMhs/alqxh
U84z+oEo/0GKE/jWwuqr9f/lnc9h/s5m5DWHnC6BEdCDPtjAZtUz15QJD9ViBfsQ
gVoL1ahSz0WEduI9/lDjUNxE7mlJmS3Z4Y1w2lbqv5wsCk6xO2CT6+XnGq7C0pEi
tOeQTLP6R+MUThjxDSapmiGYCcMAOlPsXnOygmBuuzraILE9hEjxFO1qYZ3m9E6l
Oj9H3JVXcsvMjtTPAAIj/Pb7A9sdx2aiNBknSwpdc699QG1EQ6P+
=bzWg
-----END PGP SIGNATURE-----
More information about the Enigmail
mailing list