[openpgp] Re: [openpgp-email] Re: Re: Fwd: New Version Notification for draft-gallagher-email-invisible-signatures-00.txt

Michael Richardson <mcr+ietf@sandelman.ca> Wed, 07 May 2025 10:06 UTC

Return-Path: <mcr@sandelman.ca>
X-Original-To: openpgp@mail2.ietf.org
Delivered-To: openpgp@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 319C325D49D5 for <openpgp@mail2.ietf.org>; Wed, 7 May 2025 03:06:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=sandelman.ca
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JqWDoi2Bsiif for <openpgp@mail2.ietf.org>; Wed, 7 May 2025 03:06:17 -0700 (PDT)
Received: from relay.sandelman.ca (relay.cooperix.net [176.58.120.209]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 8FE8125D49C0 for <openpgp@ietf.org>; Wed, 7 May 2025 03:06:17 -0700 (PDT)
Authentication-Results: relay.sandelman.ca; dkim=pass (2048-bit key; secure) header.d=sandelman.ca header.i=@sandelman.ca header.a=rsa-sha256 header.s=dyas header.b=O/IrXwP7; dkim-atps=neutral
Received: from dyas.sandelman.ca (unknown [92.207.226.51]) by relay.sandelman.ca (Postfix) with ESMTPS id 91A1C1F4B8; Wed, 7 May 2025 10:06:16 +0000 (UTC)
Received: by dyas.sandelman.ca (Postfix, from userid 1000) id EE36EAF61C; Wed, 7 May 2025 10:55:56 +0100 (BST)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=sandelman.ca; s=dyas; t=1746611756; bh=0Ntu3RqukeyPQmsAWojvqQro4SZRv2IqobzHNi45CLQ=; h=From:To:cc:Subject:In-reply-to:References:Date:From; b=O/IrXwP7hZbRVgpo6oiAWHW9sP/7o6g2Lc262jBPNAKHqJcC1um/3H/WUweJHj1b4 KtFPYLSpD4/nmRYeAHuUNTyzTQeQnPmTi77i2P9nEurfdJNKLVQjoWvTmPWO2SMZOZ V+X+N0yXdrdxNlmFg9XhBsT/AMl5d5/9BpjpZfhJ+yV6LawzSom/xkF86RJ3B/O4mC gPutS5ufhhGfOVIdhYmqUTPUksBR3muhprgHGvjLz+1WrziNheuKMePnPmes/TxuYS n3ch+wDl/x9VH4eW4hOL8Q/HFPF/8BZWCKDPeJQ1tg2hEcvM40yvhzTSaoErdF1NI6 xNVW34M14J4wA==
From: Michael Richardson <mcr+ietf@sandelman.ca>
To: esus <andre@heinecke.or.at>
In-reply-to: <3AA858D5-F9DF-4B0E-8293-F6C3D160F46F@heinecke.or.at>
References: <174626909298.338737.10420965667394729319@dt-datatracker-58d4498dbd-6gzjf> <5E01CE52-2B15-48BA-BCEE-4E7FAB7FBD02@andrewg.com> <966942.1746301560@dyas> <87bjs6hpl5.fsf@fifthhorseman.net> <174647524393.40327.15677669559083103648@mailman014.mail.hostpoint.internal> <3AA858D5-F9DF-4B0E-8293-F6C3D160F46F@heinecke.or.at>
Comments: In-reply-to esus <andre@heinecke.or.at> message dated "Tue, 06 May 2025 18:03:25 +0200."
X-Mailer: MH-E 8.6+git; nmh 1.7.1; GNU Emacs 26.3
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-="; micalg="pgp-sha512"; protocol="application/pgp-signature"
Date: Wed, 07 May 2025 10:55:56 +0100
Message-ID: <1290229.1746611756@dyas>
Message-ID-Hash: 3JYLHJNAJA7JYWRXP4JP6F76WTFNMF7O
X-Message-ID-Hash: 3JYLHJNAJA7JYWRXP4JP6F76WTFNMF7O
X-MailFrom: mcr@sandelman.ca
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-openpgp.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: OpenPGP-based Email Encryption <openpgp-email@enigmail.net>, Daniel Kahn Gillmor <dkg@fifthhorseman.net>, Stephen Farrell <stephen.farrell@cs.tcd.ie>, IETF OpenPGP WG <openpgp@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [openpgp] Re: [openpgp-email] Re: Re: Fwd: New Version Notification for draft-gallagher-email-invisible-signatures-00.txt
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/openpgp/wtKMsozMumuf-rctW-_CbNWnxhE>
List-Archive: <https://mailarchive.ietf.org/arch/browse/openpgp>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Owner: <mailto:openpgp-owner@ietf.org>
List-Post: <mailto:openpgp@ietf.org>
List-Subscribe: <mailto:openpgp-join@ietf.org>
List-Unsubscribe: <mailto:openpgp-leave@ietf.org>

esus <andre@heinecke.or.at> wrote:
    > I Just randomly saw this because my Filter settings are currently
    > broken and this ended up in my Inbox. No No No. You can give the
    > Attachment a reasonable Filename Like openpgp digital signature.asc and
    > then have that handled by a third Party Program which links the File
    > Extension .asc

Yes.  I can do that.

But random muggles who read my email haven't a clue how to do this, and get upset
when there is an apparent attachment that they can't open.  This discourages
people from oppostunistically signing their email, and prevents leveraging
the fax effect.

This is absolutely a quality of implementation issue that is also affecting
SML WG.

(Linking to file extensions is a route to trojans which is well trod on
windows since 1994 costing the world trillions.  It has to link to Media types)


--
Michael Richardson <mcr+IETF@sandelman.ca>, Sandelman Software Works
 -= IPv6 IoT consulting =-                      *I*LIKE*TRAINS*