Re: [lamps] I-D Action: draft-ietf-lamps-header-protection-10.txt

Thanks for posting the update.  I have two minor suggestions.

Section 2.3.2: s/header field name name/header field name/

Section 2.5.8.1 says:

   When crafting the headers for a reply message, the composing MUA can
   make use of the reference message's HP-Removed and HP-Obscured
   headers (from within the cryptographic envelope) to ensure that
   headers derived from the reference message do not leak in the reply.

I suggest a small rewording:

   When crafting the headers for a reply message, the composing MUA can
   make use of the HP-Removed and HP-Obscured headers from within
   the cryptographic envelope of the reference message to ensure that
   headers derived from the reference message do not leak in the reply.

Russ

> On Dec 20, 2022, at 7:08 PM, internet-drafts@ietf.org wrote:
> 
> 
> A New Internet-Draft is available from the on-line Internet-Drafts directories.
> This draft is a work item of the Limited Additional Mechanisms for PKIX and SMIME WG of the IETF.
> 
>        Title           : Header Protection for S/MIME
>        Authors         : Daniel Kahn Gillmor
>                          Bernie Hoeneisen
>                          Alexey Melnikov
>  Filename        : draft-ietf-lamps-header-protection-10.txt
>  Pages           : 178
>  Date            : 2022-12-20
> 
> Abstract:
>   S/MIME version 3.1 introduced a mechanism to provide end-to-end
>   cryptographic protection of e-mail message headers.  However, few
>   implementations generate messages using this mechanism, and several
>   legacy implementations have revealed rendering or security issues
>   when handling such a message.
> 
>   This document updates the S/MIME specification to offer a different
>   mechanism that provides the same cryptographic protections but with
>   fewer downsides when handled by legacy clients.  Furthermore, it
>   offers more explicit guidance for clients when generating or handling
>   e-mail messages with cryptographic protection of message headers.
> 
> 
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-ietf-lamps-header-protection/
> 
> There is also an htmlized version available at:
> https://datatracker.ietf.org/doc/html/draft-ietf-lamps-header-protection-10
> 
> A diff from the previous version is available at:
> https://author-tools.ietf.org/iddiff?url2=draft-ietf-lamps-header-protection-10
> 
> 
> Internet-Drafts are also available by rsync at rsync.ietf.org::internet-drafts
> 
> 
> _______________________________________________
> Spasm mailing list
> Spasm@ietf.org
> https://www.ietf.org/mailman/listinfo/spasm