Re: [Jmap] S/MIME for JMAP

Alexey Melnikov <alexey.melnikov@isode.com> Wed, 09 August 2017 10:54 UTC

Return-Path: <alexey.melnikov@isode.com>
X-Original-To: jmap@ietfa.amsl.com
Delivered-To: jmap@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7E22E132125 for <jmap@ietfa.amsl.com>; Wed, 9 Aug 2017 03:54:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.001
X-Spam-Level:
X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=isode.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8RAZ-OQNZU-q for <jmap@ietfa.amsl.com>; Wed, 9 Aug 2017 03:53:58 -0700 (PDT)
Received: from waldorf.isode.com (waldorf.isode.com [62.232.206.188]) by ietfa.amsl.com (Postfix) with ESMTP id DC9D2126B6D for <jmap@ietf.org>; Wed, 9 Aug 2017 03:53:57 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; t=1502276037; d=isode.com; s=june2016; i=@isode.com; bh=xfa+7dlU5r9V4mdLfHqWO97iWBNznsOlRqYIctYdkdQ=; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version: In-Reply-To:References:Content-Type:Content-Transfer-Encoding: Content-ID:Content-Description; b=SwOvhVWAJ1dXZhaKeUIlAUTd2RRGjyZtXr4nsnjx94XmhfSrCQVUVAmfTgN1qB/B/PMQFO yrp8L4yZZxUWOPlrEToxj1N4WxhlAJosY4VOKlMMcBQ4BuU0HFMo0i7AjJSnTcw4yN4t+2 U3hM+VaSTRVzHVC5Dn1R9X0qsAu53gg=;
Received: from [172.20.1.215] (dhcp-215.isode.net [172.20.1.215]) by waldorf.isode.com (submission channel) via TCP with ESMTPSA id <WYrpxABtVSx0@waldorf.isode.com>; Wed, 9 Aug 2017 11:53:56 +0100
To: Neil Jenkins <neilj@fastmailteam.com>, jmap@ietf.org
References: <CACZ1GipPKTQpxFM7zmQQ68LrmFN3=UYMwYPFyY6tTvSFEoguXQ@mail.gmail.com> <1502093112.3151700.1065298592.2621D0B7@webmail.messagingengine.com>
From: Alexey Melnikov <alexey.melnikov@isode.com>
Message-ID: <28290c5e-1f4b-e877-978f-5836b3994598@isode.com>
Date: Wed, 09 Aug 2017 11:53:38 +0100
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.2.1
In-Reply-To: <1502093112.3151700.1065298592.2621D0B7@webmail.messagingengine.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Transfer-Encoding: 7bit
Content-Language: en-US
Archived-At: <https://mailarchive.ietf.org/arch/msg/jmap/PNELrVDrSMxepYRYS4WwB-xLW64>
Subject: Re: [Jmap] S/MIME for JMAP
X-BeenThere: jmap@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: JSON Message Access Protocol <jmap.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/jmap>, <mailto:jmap-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/jmap/>
List-Post: <mailto:jmap@ietf.org>
List-Help: <mailto:jmap-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/jmap>, <mailto:jmap-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 09 Aug 2017 10:54:08 -0000

On 07/08/2017 09:05, Neil Jenkins wrote:

> On Wed, 2 Aug 2017, at 06:23 AM, vaibhav singh wrote:
>> I have one straight question though; how is S/MIME going to be 
>> supported for JMAP?
>
> A client can fetch the raw RFC5322 message to decrypt and/or verify 
> S/MIME; this is really the only option if the client has the private keys.

Right.

> If the private keys are on the server (some corporate systems 
> sign/verify at the gateway) the server can transparently decrypt and 
> could add a keyword to say this message has been verified. This is 
> outside the scope of the JMAP spec itself though (any keyword(s) you 
> added to the IANA registry can be used in either IMAP or JMAP of course).

There is a similar case of webmail which can access use keys on behalf 
of a user.

If people are interested in thinking about/experimenting with possible 
JMAP extensions for S/MIME for the latter case, please let me know.

Best Regards,
Alexey