Re: [openpgp] Put Signature in an Email's Header

[Werner Koch <[e-mail]>]

Hi,

I don't that I need to remark that bypassing is MIME is a Bad Thing.

For the concrete problem some people have with OpenPGP signatures (i.e.
seeing an unknown attachment and fearing malware) a simple and well
working solution:

  Content-Type: application/pgp-signature; name="signature.asc"
  Content-Description: This is a digitally signed message part.

or better with a more descriptive file name as Outlook does it:

  Content-Type: application/pgp-signature;
 	name="openpgp-digital-signature.asc"

This tell the user what the attachment is about and 95% of all questions
are solved.

Sure, this does not help against stupid enterprise style mail filters
which tend break mails for fun and no-profit.  Not just attachments, but
are also reordering parts and some even modifying header lines.


Shalom-Salam,

   Werner

-- 
The pioneers of a warless world are the youth that
refuse military service.             - A. Einstein