Hi Werner!

Werner Koch <w...@gnupg.org> wrote:
> Hi Bjarni,
> 
> On Sun, 23 Nov 2014 14:12, b...@pagekite.net said:
> 
> > https://www.mailpile.is/blog/2014-11-21_To_PGP_MIME_Or_Not.html
> 
> Not read (yet).
> 
> > The "tl;dr" is that it might be worth dropping PGP/MIME for outgoing
> > encrypted mail and instead use a more ad-hoc approach which
> 
> Please don't do this.  

Since you haven't read the post, you don't know what I am proposing. So
why would you say this? :-P

> In particular the encrypted format is so easy to create and parse that it is 
> not worth to even think about it.

This is demonstrably incorrect, I have given numerous examples of mail
clients and plugins that fail to accomplish this supposedly simple task.

> > interoperates with more mail clients. I'm also tentatively proposing an
> > approach to reducing the header metadata leakage (Subject, From, To,
> > etc. being sent in the clear).
> 
> Wrap in a message/rfc822 part.

If PGP/MIME had proposed this from the start, then I wouldn't be able to
make cheap shots about Subject lines and indeed, living with the other
problems would be far more palatable.

But PGP/MIME missed that boat, and the user experience of a
message/rfc822 part inside a multipart encrypted wrapper is really not
acceptable in today's clients. You wouldn't want to read all your
incoming mail that way.

Also consider that desktop users who don't have a PGP/MIME capable
e-mail client installed, probably don't have user friendly tools for
handling raw e-mail data either. So this doesn't help compatibility.
It's better than the fragments of MIME we get today, but still not
great. Note that I am very specifically exploring whether there are ways
to interact better with the clients we have today.

I'm not feeling much enthusiasm from the community though, mostly
push-back. I'll admit I am disappointed, but it's useful feedback all
the same. No matter how much thought I put into the proposal, if the
community isn't interested then I should probably focus on other things.

Thanks for taking the time!
 - Bjarni

-- 
I make stuff: www.mailpile.is, www.pagekite.net

Attachment: signature.asc
Description: OpenPGP Digital Signature

_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Reply via email to