On 5 Sep 2024, at 16:04, Daniel Kahn Gillmor <[email protected]> wrote:
> 
> PS for the record, i think there is one major concern about PGP/MIME
>   multipart/signed: for users of MUAs that don't understand PGP/MIME,
>   the signature shows up as a mystery attachment.  I can't tell you the
>   number of times that i get a response from a colleague that says "i
>   can't open your attachment, please re-send".  That happens often
>   enough that i deliberately do not sign mail unless i know the
>   recipient won't do that.  That means i don't sign most of my mail,

I’ve been signing all my email (from my laptop anyway) for twenty years, and 
the last time I had complaints about mystery attachments was in the early 
2000s. That said, there are a lot of automated systems (e.g. bug trackers) that 
treat the attachment as a file that needs to be recorded for posterity, e.g. 
attaching it to a ticket on every emailed comment/reply (although this also 
applies to HTML email signature footers, which is more annoying). So I do think 
that moving from an attachment-based cleartext format to a header-based one has 
some advantages.

A

Attachment: signature.asc
Description: Message signed with OpenPGP

_______________________________________________
Gnupg-users mailing list
[email protected]
https://lists.gnupg.org/mailman/listinfo/gnupg-users

Reply via email to