Re: [lamps] Proposed addition of header protection to the LAMPS charter

[Russ Housley <[e-mail]>]

Bernie:
> 
> I am confused about the origin of the "proposed charter text" you are refering to and suggesting to amend:
> 
>> +7. Specify a mechanism for the cryptographic protection of e-mail
>> +headers.  Most current implementations protect only the body of the
>> +message, which leaves significant room for attacks against
>> +otherwise-protected messages.  Cryptographic protection (both for
>> +signatures and encryption) which applies to the headers in conjunction
>> +with the message body are necessary to close significant security and
>> +usability gaps in cryptographically-protected electronic mail.
> 
> Who drafted this charter text proposal and where has this been published before? I have been unable to find any traces on this mailing list. Does this origine from an IETF external source? Or is there some (hidden?) venue I am not aware of?
> 
> Thanks in advance for enlightening me on this process question.

This was discussed at the last two IETF meeting, and an individual Internet-Draft was posted.  In the room at the Bangkok IETF, people thought this was something the group should work on.  It is not covered by the current charter, so DKG is proposing charter text.

Russ