Re: [openpgp] Bug#931238: hot armor: please drop "Version: " header

ilf <ilf@zeromail.org> Wed, 10 July 2019 19:52 UTC

Return-Path: <ilf@zeromail.org>
X-Original-To: openpgp@ietfa.amsl.com
Delivered-To: openpgp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3436912004A for <openpgp@ietfa.amsl.com>; Wed, 10 Jul 2019 12:52:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level:
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3GOiwAh1c1pc for <openpgp@ietfa.amsl.com>; Wed, 10 Jul 2019 12:52:04 -0700 (PDT)
Received: from smtpin.nadir.org (fry.nadir.org [217.114.68.218]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 828E8120043 for <openpgp@ietf.org>; Wed, 10 Jul 2019 12:52:03 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by smtpin.nadir.org (Postfix) with ESMTP id 0AA917CAB31; Wed, 10 Jul 2019 21:52:00 +0200 (CEST)
Received: from smtpin.nadir.org ([127.0.0.1]) by localhost (fry.nadir.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 92dgcwbsFXuo; Wed, 10 Jul 2019 21:51:59 +0200 (CEST)
Received: from snail.zeromail.org (mail.zeromail.org [217.114.68.185]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtpin.nadir.org (Postfix) with ESMTPS id BDC6B7CAB2A; Wed, 10 Jul 2019 21:51:59 +0200 (CEST)
Received: from [127.0.0.1] (localhost [127.0.0.1])ng TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by snail.zeromail.org (Postfix) with ESMTPSA id A02A4C1AB2; Wed, 10 Jul 2019 21:51:58 +0200 (CEST)
Date: Wed, 10 Jul 2019 21:51:44 +0200
From: ilf <ilf@zeromail.org>
To: openpgp@ietf.org
Cc: 931238@bugs.debian.org
Message-ID: <20190710195144.GA1362@zeromail.org>
Mail-Followup-To: openpgp@ietf.org, 931238@bugs.debian.org
References: <87zhm1o0f7.fsf@fifthhorseman.net> <20190706133941.tw3znn74q4iseiyo@scru.org> <54525144-b7bf-fa79-c497-ca8fbf77f89d@gmx.net> <8d960bb1-0fe8-c2e3-fcf4-4d00ed4adfce@rub.de> <1562550125588.27272@cs.auckland.ac.nz> <20190708104852.GH1362@zeromail.org>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="oAjj1ZwgLg4oRN9q"
Content-Disposition: inline
In-Reply-To: <20190708104852.GH1362@zeromail.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/openpgp/UvNG6Mwf4vaP30QhVP9ZKRMbSCM>
Subject: Re: [openpgp] Bug#931238: hot armor: please drop "Version: " header
X-BeenThere: openpgp@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/openpgp>, <mailto:openpgp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/openpgp/>
List-Post: <mailto:openpgp@ietf.org>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/openpgp>, <mailto:openpgp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 10 Jul 2019 19:52:07 -0000

ilf:
> So please:
> 1. let's drop it by default in other implementations, like hOpenPGP
> 2. let's edit rfc4880bis to "SHOULD NOT emit a Version: header"

After this mail:

1. LibTMCG dropped it by default: 
http://git.savannah.nongnu.org/cgit/libtmcg.git/commit/?id=2c8a6861ab839cb58b6483a04a7b584423a27811

2. Heiko Stamer submitted a pull request to rfc4880bis: 
https://gitlab.com/openpgp-wg/rfc4880bis/merge_requests/17

I added a comment to slighty improve the wording:

> To minimize metadata, implementations SHOULD NOT emit this key and its 
> corresponding value except for debugging purposes with explicit user 
> consent.

-- 
ilf

If you upload your address book to "the cloud", I don't want to be in it.