Re: [lamps] HP Issue: Bcc Handling

Alexey Melnikov <alexey.melnikov@isode.com> Tue, 10 November 2020 09:43 UTC

Return-Path: <alexey.melnikov@isode.com>
X-Original-To: spasm@ietfa.amsl.com
Delivered-To: spasm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E65FE3A0D51 for <spasm@ietfa.amsl.com>; Tue, 10 Nov 2020 01:43:55 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, NICE_REPLY_A=-0.001, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=isode.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Rrrki7o3hoTX for <spasm@ietfa.amsl.com>; Tue, 10 Nov 2020 01:43:54 -0800 (PST)
Received: from waldorf.isode.com (waldorf.isode.com [62.232.206.188]) by ietfa.amsl.com (Postfix) with ESMTP id 4E3163A0D4B for <spasm@ietf.org>; Tue, 10 Nov 2020 01:43:54 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; t=1605001433; d=isode.com; s=june2016; i=@isode.com; bh=toF92SqDMRLCfPMiwXRIHraSquEutONo05iGiwOvh64=; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version: In-Reply-To:References:Content-Type:Content-Transfer-Encoding: Content-ID:Content-Description; b=FwxSjwUvkr3YfExjUuPqNqKe/hLRSHmH6NE4wtfDdYVqeXpXIfa2vymrG62kNIKzqsRBO0 ijF5Vmsv8JfI4nEh84SWguv3EESyI/S7qb0inU5Zo91tGmmD+mR9tR39OetB4YpV4ToAdD Wzyq78w0MUrNIMJB7K6R5Q8bc8qmW7M=;
Received: from [192.168.1.222] (host5-81-100-6.range5-81.btcentralplus.com [5.81.100.6]) by waldorf.isode.com (submission channel) via TCP with ESMTPSA id <X6pg2AA31wtK@waldorf.isode.com>; Tue, 10 Nov 2020 09:43:52 +0000
To: Russ Housley <housley@vigilsec.com>, Daniel Kahn Gillmor <dkg@fifthhorseman.net>
Cc: IETF LAMPS WG <spasm@ietf.org>
References: <alpine.DEB.2.22.394.2010021410290.55994@softronics.hoeneisen.ch> <F39D531C-A777-4318-93A7-C8C95F39A94E@vigilsec.com> <87r1p2gnrh.fsf@fifthhorseman.net> <CFB33B4D-C606-443D-9C3D-67D4BB952E07@vigilsec.com>
From: Alexey Melnikov <alexey.melnikov@isode.com>
Message-ID: <9c06d4ae-4e3a-a8ec-77d5-7b6486ba8dcb@isode.com>
Date: Tue, 10 Nov 2020 09:43:46 +0000
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:78.0) Gecko/20100101 Thunderbird/78.4.1
In-Reply-To: <CFB33B4D-C606-443D-9C3D-67D4BB952E07@vigilsec.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="windows-1252"; format="flowed"
Content-Transfer-Encoding: 7bit
Content-Language: en-GB
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/6LeSrmnvBKPJHMG2Y80pWixuTf8>
Subject: Re: [lamps] HP Issue: Bcc Handling
X-BeenThere: spasm@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." <spasm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spasm>, <mailto:spasm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spasm/>
List-Post: <mailto:spasm@ietf.org>
List-Help: <mailto:spasm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spasm>, <mailto:spasm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Nov 2020 09:43:56 -0000

Hi all,

On 09/11/2020 23:29, Russ Housley wrote:

> DKG:
>
>> On Fri 2020-10-02 10:33:10 -0400, Russ Housley wrote:
>>
>>> Please take a look at RFC 5322, Section 3.6.3.  The proposed direction
>>> seems to be consistent, but you probably want to cite this section.
>> Thanks for this pointer, Russ.  Bcc is a surprisingly tricky thing to
>> get right in all cases.
>>
>> In addition to the guidance in the section you cite, there are unusual
>> tricks or special cases that responsible MUAs will want to do to deal
>> with Bcc in "Sent" folders and "Drafts" folders (the semantics of these
>> folders in most MUAs are subtly different from other folders, and from
>> each other).  Also, there are some subtleties when dealing with Bcc for
>> encrypted e-mail (regardless of header protection) -- i've added a note
>> in the to-do list in https://gitlab.com/dkg/e2e-mail-guidance to try to
>> flesh those out.
>>
>> But after some discussion with Alexey and Bernie, i think we're reaching
>> the conclusion that as complex as the work around Bcc is, it's pretty
>> much orthogonal to protected headers -- if you are doing the right thing
>> with Bcc already, you're likely going to do the right thing with Bcc
>> when generating a message with protected headers and Bcc.  (Conversely,
>> a MUA that screws up Bcc isn't likely to magically get it right because
>> they're implementing protected headers)
>> I'll make an edit to the header protection draft that simplifies the
>> text about Bcc, includes the reference you mention above, and otherwise
>> doesn't drag the draft into too much detail.
> Good observations.  Sounds like a reasonable way forward.

To clarify my position: I am happy to take Bcc discussion out of the 
Header Protection draft, but I would still like to do this work in LAMPS.

Best Regards,

Alexey