Re: [lamps] I-D Action: draft-ietf-lamps-e2e-mail-guidance-01.txt

Daniel Kahn Gillmor <dkg@fifthhorseman.net> Tue, 25 January 2022 18:58 UTC

Return-Path: <dkg@fifthhorseman.net>
X-Original-To: spasm@ietfa.amsl.com
Delivered-To: spasm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BABC83A0E93 for <spasm@ietfa.amsl.com>; Tue, 25 Jan 2022 10:58:23 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.306
X-Spam-Level:
X-Spam-Status: No, score=-6.306 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_HI=-5, RDNS_NONE=0.793, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=neutral reason="invalid (unsupported algorithm ed25519-sha256)" header.d=fifthhorseman.net header.b=hoasu2Fk; dkim=pass (2048-bit key) header.d=fifthhorseman.net header.b=EclNDpZd
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id T48LltsjKcHI for <spasm@ietfa.amsl.com>; Tue, 25 Jan 2022 10:58:19 -0800 (PST)
Received: from che.mayfirst.org (unknown [162.247.75.117]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0AB1C3A0E92 for <spasm@ietf.org>; Tue, 25 Jan 2022 10:58:18 -0800 (PST)
DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/simple; d=fifthhorseman.net; i=@fifthhorseman.net; q=dns/txt; s=2019; t=1643137096; h=from : to : subject : in-reply-to : references : date : message-id : mime-version : content-type : from; bh=ImqCJ8dbNrCSRpPh2UzMliGgCNHPTOvqzkafMOFnVZ4=; b=hoasu2FklXYkilFSRdCaiEn1F68pD+7DZCNqWWIgv5qh9pKbka+HBGZG8cfALolPIknlY TgR5qDUsRd0okQwCA==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=fifthhorseman.net; i=@fifthhorseman.net; q=dns/txt; s=2019rsa; t=1643137096; h=from : to : subject : in-reply-to : references : date : message-id : mime-version : content-type : from; bh=ImqCJ8dbNrCSRpPh2UzMliGgCNHPTOvqzkafMOFnVZ4=; b=EclNDpZdUoadOEt6XNYUiSJJgvguLrqXgwAzsd4PDKQeBN6wxJbuNq7njBdT7tlYZnoHi eUFHq0ggpEWGUk+4pkti03sytCMlv2HME5IAdA1cnZ9v2fdksCO5mTePH9oZKAdiUZ0pEK8 HiWNH/ugv2cOWKfOW/iqL+Hk5SuKt3dUk/1rWuz490z4nanMZWRsdtjrRAkeKZw9snTgJA3 yML8+AvjnHAIB2YhZSdI6h0zmbWmTXmxyycfSrzLfYC7zX2rkjRWoy2ffM5q0tE6G8EHMX8 MA8PXCaJ7AuEBR9LGLW54lqZAsJ7d+1+r5V2LgZDPHsUDQpSnXdfbLqDmuWw==
Received: from fifthhorseman.net (lair.fifthhorseman.net [108.58.6.98]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by che.mayfirst.org (Postfix) with ESMTPSA id 53093F9AA for <spasm@ietf.org>; Tue, 25 Jan 2022 13:58:15 -0500 (EST)
Received: by fifthhorseman.net (Postfix, from userid 1000) id E054E2031D; Tue, 25 Jan 2022 11:54:51 -0500 (EST)
From: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
To: spasm@ietf.org
In-Reply-To: <164307100871.19181.11588373375019903650@ietfa.amsl.com>
References: <164307100871.19181.11588373375019903650@ietfa.amsl.com>
Autocrypt: addr=dkg@fifthhorseman.net; prefer-encrypt=mutual; keydata= mDMEX+i03xYJKwYBBAHaRw8BAQdACA4xvL/xI5dHedcnkfViyq84doe8zFRid9jW7CC9XBiI0QQf FgoAgwWCX+i03wWJBZ+mAAMLCQcJEOCS6zpcoQ26RxQAAAAAAB4AIHNhbHRAbm90YXRpb25zLnNl cXVvaWEtcGdwLm9yZ/tr8E9NA10HvcAVlSxnox6z62KXCInWjZaiBIlgX6O5AxUKCAKbAQIeARYh BMKfigwB81402BaqXOCS6zpcoQ26AADZHQD/Zx9nc3N2kj13AUsKMr/7zekBtgfSIGB3hRCU74Su G44A/34Yp6IAkndewLxb1WdRSokycnaCVyrk0nb4imeAYyoPtBc8ZGtnQGZpZnRoaG9yc2VtYW4u bmV0PojRBBMWCgCDBYJf6LTfBYkFn6YAAwsJBwkQ4JLrOlyhDbpHFAAAAAAAHgAgc2FsdEBub3Rh dGlvbnMuc2VxdW9pYS1wZ3Aub3JnL0Gwxvypz2tu1IPG+yu1zPjkiZwpscsitwrVvzN3bbADFQoI ApsBAh4BFiEEwp+KDAHzXjTYFqpc4JLrOlyhDboAAPkXAP0Z29z7jW+YzLzPTQML4EQLMbkHOfU4 +s+ki81Czt0WqgD/SJ8RyrqDCtEP8+E4ZSR01ysKqh+MUAsTaJlzZjehiQ24MwRf6LTfFgkrBgEE AdpHDwEBB0DkKHOW2kmqfAK461+acQ49gc2Z6VoXMChRqobGP0ubb4kBiAQYFgoBOgWCX+i03wWJ BZ+mAAkQ4JLrOlyhDbpHFAAAAAAAHgAgc2FsdEBub3RhdGlvbnMuc2VxdW9pYS1wZ3Aub3Jnfvo+ nHoxDwaLaJD8XZuXiaqBNZtIGXIypF1udBBRoc0CmwICHgG+oAQZFgoAbwWCX+i03wkQPp1xc3He VlxHFAAAAAAAHgAgc2FsdEBub3RhdGlvbnMuc2VxdW9pYS1wZ3Aub3JnaheiqE7Pfi3Atb3GGTw+ jFcBGOaobgzEJrhEuFpXREEWIQQttUkcnfDcj0MoY88+nXFzcd5WXAAAvrsBAIJ5sBg8Udocv25N stN/zWOiYpnjjvOjVMLH4fV3pWE1AP9T6hzHz7hRnAA8d01vqoxOlQ3O6cb/kFYAjqx3oMXSBhYh BMKfigwB81402BaqXOCS6zpcoQ26AADX7gD/b83VObe14xrNP8xcltRrBZF5OE1rQSPkMNy+eWpk eCwA/1hxiS8ZxL5/elNjXiWuHXEvUGnRoVj745Vl48sZPVYMuDgEX+i03xIKKwYBBAGXVQEFAQEH QIGex1WZbH6xhUBve5mblScGYU+Y8QJOomXH+rr5tMsMAwEICYjJBBgWCgB7BYJf6LTfBYkFn6YA CRDgkus6XKENukcUAAAAAAAeACBzYWx0QG5vdGF0aW9ucy5zZXF1b2lhLXBncC5vcmcEAx9vTD3b J0SXkhvcRcCr6uIDJwic3KFKxkH1m4QW0QKbDAIeARYhBMKfigwB81402BaqXOCS6zpcoQ26AAAX mwD8CWmukxwskU82RZLMk5fm1wCgMB5z8dA50KLw3rgsCykBAKg1w/Y7XpBS3SlXEegIg1K1e6dR fRxL7Z37WZXoH8AH
Date: Tue, 25 Jan 2022 11:54:50 -0500
Message-ID: <874k5r7o2t.fsf@fifthhorseman.net>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-="; micalg="pgp-sha256"; protocol="application/pgp-signature"
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/XPZQIfGIRtQPflJRuE8HfJdjtog>
Subject: Re: [lamps] I-D Action: draft-ietf-lamps-e2e-mail-guidance-01.txt
X-BeenThere: spasm@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." <spasm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spasm>, <mailto:spasm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spasm/>
List-Post: <mailto:spasm@ietf.org>
List-Help: <mailto:spasm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spasm>, <mailto:spasm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Jan 2022 18:58:24 -0000

On Mon 2022-01-24 16:36:48 -0800, internet-drafts@ietf.org wrote:
> A New Internet-Draft is available from the on-line Internet-Drafts directories.
> This draft is a work item of the Limited Additional Mechanisms for PKIX and SMIME WG of the IETF.
>
>         Title           : Guidance on End-to-End E-mail Security
>         Author          : Daniel Kahn Gillmor
> 	Filename        : draft-ietf-lamps-e2e-mail-guidance-01.txt
> 	Pages           : 29
> 	Date            : 2022-01-24

This update mainly adds a bit of text about common ways that MUAs think
about the message's "main body" (the part represented to the user as the
text of the e-mail) and "attachments".  These concepts are useful in
thinking about e2e encrypted messages.

For example, how do cryptographic protections apply to the different
parts if they are wrapped in different cryptographic layers?  the
argument is that the entire message should be under one uniform
cryptographic envelope.

The idea of which parts might be the "main body" part for different
renderers may also be useful in the ongoing header protection work that
Bernie and Alexey and I are working on (more on that soon, hopefully).

From the document's changelog:

-----
### Substantive changes from draft-ietf-...-00 to draft-ietf-...-01

- Added section about distinguishing Main Body Parts and Attachments
- Updated document considerations section, including reference to auto-built editor's copy
-----

Reviews, comments, recommendations, questions, etc more than welcome, as
usual!

  --dkg