Re: [openpgp] "OpenPGP Simple"

Christoph Anton Mitterer <calestyo@scientia.net> Wed, 18 March 2015 22:43 UTC

Return-Path: <calestyo@scientia.net>
X-Original-To: openpgp@ietfa.amsl.com
Delivered-To: openpgp@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 280731A90F2 for <openpgp@ietfa.amsl.com>; Wed, 18 Mar 2015 15:43:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level:
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BU00tXJYJptQ for <openpgp@ietfa.amsl.com>; Wed, 18 Mar 2015 15:43:19 -0700 (PDT)
Received: from mailgw02.dd24.net (mailgw-02.dd24.net [193.46.215.43]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 523841A90E6 for <openpgp@ietf.org>; Wed, 18 Mar 2015 15:43:19 -0700 (PDT)
Received: from mailpolicy-01.live.igb.homer.key-systems.net (mailpolicy-02.live.igb.homer.key-systems.net [192.168.1.27]) by mailgw02.dd24.net (Postfix) with ESMTP id 0BAC85FC59 for <openpgp@ietf.org>; Wed, 18 Mar 2015 22:43:18 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at mailpolicy-02.live.igb.homer.key-systems.net
Received: from mailgw02.dd24.net ([192.168.1.36]) by mailpolicy-01.live.igb.homer.key-systems.net (mailpolicy-02.live.igb.homer.key-systems.net [192.168.1.25]) (amavisd-new, port 10236) with ESMTP id k7ecGkCaVZQs for <openpgp@ietf.org>; Wed, 18 Mar 2015 22:43:16 +0000 (UTC)
Received: from heisenberg.fritz.box (ppp-93-104-121-105.dynamic.mnet-online.de [93.104.121.105]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mailgw02.dd24.net (Postfix) with ESMTPSA for <openpgp@ietf.org>; Wed, 18 Mar 2015 22:43:16 +0000 (UTC)
Message-ID: <1426718594.4249.23.camel@scientia.net>
From: Christoph Anton Mitterer <calestyo@scientia.net>
To: openpgp@ietf.org
Date: Wed, 18 Mar 2015 23:43:14 +0100
In-Reply-To: <E5CD0AF9-2933-4938-805C-EAE1A45C3D39@callas.org>
References: <9A043F3CF02CD34C8E74AC1594475C73AAFB3811@uxcn10-5.UoA.auckland.ac.nz> <E5CD0AF9-2933-4938-805C-EAE1A45C3D39@callas.org>
Content-Type: multipart/signed; micalg="sha-512"; protocol="application/x-pkcs7-signature"; boundary="=-WcRxf6H71AMhJ5pIxudd"
X-Mailer: Evolution 3.12.9-1+b1
Mime-Version: 1.0
Archived-At: <http://mailarchive.ietf.org/arch/msg/openpgp/NMviEKQU2ctuV2iUwIco-3uPGhE>
Subject: Re: [openpgp] "OpenPGP Simple"
X-BeenThere: openpgp@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/openpgp>, <mailto:openpgp-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/openpgp/>
List-Post: <mailto:openpgp@ietf.org>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/openpgp>, <mailto:openpgp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 18 Mar 2015 22:43:21 -0000

On Mon, 2015-03-16 at 23:48 -0700, Jon Callas wrote:
> ASCII armor ends up being a nice way to encode something so you don’t
> have to play "guess the binary format."
But isn't that basically the same case as with the character encoding
thread?! In the sense of:

It's not OpenPGPs task to fix other applications/protocols!

If these need to use OpenPGP messages and they don't support binary
formats (which by itself is fine), then their own native means for
converting blobs into a suitable form should be used (e.g. XML's or
whichever) and if no such form exist, we should at best give a
recommendation about what to use (in the sense of referring to something
else).

Especially I don't like the idea that applications out there may use the
ascii armor's enclosing (i.e. the ---- PGP ... ----) to detect "this is
a PGP message".
There should be other things around in the protocol that uses OpenPGP
which specifies that (e.g. Content-Type: headers).


I think it would be theoretically[0] fine if a future OpenPGP standard
specifies multiple native formats, e.g. a binary one as we have right
now, a XML representation and whatever other ugly things (JSON?! ;-) )
people might want... but the ASCII armor isn't a real native format but
just an encoding, and that shouldn't be OpenPGPs duty.


Cheers,
Chris.

[0] In practise, though, there should be really strong reasons if more
than one such native format would be defined.