Re: RFCs, standards, pink bunnies and flower patterns was -- Re: GPG Outlook Plug-In and Signatures

2006-10-17 Thread Nicholas Cole
> Nicholas Cole wrote: > > Is there anything else about an HTML email that > raises a red flag > > from a security point of view? > > Define 'HTML email', please. If you're talking > about simple XML, the > security concerns are different than if you're > talking about putting > Javascript + Flas

Re: RFCs, standards, pink bunnies and flower patterns was -- Re: GPG Outlook Plug-In and Signatures

2006-10-17 Thread Ryan Malayter
On 10/17/06, Nicholas Cole <[EMAIL PROTECTED]> wrote: --- Ryan Malayter <[EMAIL PROTECTED]> wrote: > Again I must state that one has little to do with > the other. MHTML's > MIME format may not play nice with PGP/MIME's > encapsultation format, > but it didn't *have* to be that way. S/MIME, for

Re: RFCs, standards, pink bunnies and flower patterns was -- Re: GPG Outlook Plug-In and Signatures

2006-10-17 Thread Nicholas Cole
--- Ryan Malayter <[EMAIL PROTECTED]> wrote: > Again I must state that one has little to do with > the other. MHTML's > MIME format may not play nice with PGP/MIME's > encapsultation format, > but it didn't *have* to be that way. S/MIME, for > example, seems to > make provisions for playing nicel

Re: RFCs, standards, pink bunnies and flower patterns was -- Re: GPG Outlook Plug-In and Signatures

2006-10-17 Thread Nicholas Cole
> Of course that it doesn't mean that HTML should be > banished completely > from the 'lectronic mail world, but it has its > essential limitations as > for the cryptographic routines. Mica, Thank you for your email. It made me reflect. I had been ignoring this discussion. HTML emails are here

Re: RFCs, standards, pink bunnies and flower patterns was -- Re: GPG Outlook Plug-In and Signatures

2006-10-16 Thread Ryan Malayter
On 10/16/06, Mica Mijatovic <[EMAIL PROTECTED]> wrote: RFCs are not any "standards" nor they are by (their own) definition supposed to be. They are just collection of less or more recommended routines, and often also nothing but the lists of (most usual/mass) _habits_. Many RFCs *are* standar

RFCs, standards, pink bunnies and flower patterns was -- Re: GPG Outlook Plug-In and Signatures

2006-10-16 Thread Mica Mijatovic
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Was Sun, 15 Oct 2006, at 22:27:36 -0500, when Ryan wrote: > On 10/14/06, Werner Koch <[EMAIL PROTECTED]> wrote: >> Anyway, HTML mails are evil. > But unfortunately they're here to stay. RFC 2557 is now listed as > "standards track". RFCs a

Re: GPG Outlook Plug-In and Signatures

2006-10-15 Thread Ryan Malayter
On 10/14/06, Werner Koch <[EMAIL PROTECTED]> wrote: Anyway, HTML mails are evil. But unfortunately they're here to stay. RFC 2557 is now listed as "standards track". I used to rail against HTML mail myself, but all my reasoning was soundly rebuffed by the CEO, CFO, my Mom, my sister, and reall

Re: GPG Outlook Plug-In and Signatures

2006-10-14 Thread Werner Koch
On Fri, 13 Oct 2006 16:33, Ryan Malayter said: > Does any other OpenPGP client handle this "attachment" result? Or do This is actually the de-facto standard as used by PGP. > you need to save the attachments and manually verify the detached > signature? GPGOL itself doesn't seem to read this "ex

Re: GPG Outlook Plug-In and Signatures

2006-10-14 Thread Jack Kaye
I will be out of the office on Friday October 13th. If you need immedate assistance, please contact one of the following... Kevin Klein: [EMAIL PROTECTED] (262) 834-0080 x203 Gary Maradik: [EMAIL PROTECTED] x201 Tim Kannenberg: [EMAIL PROTECTED] x207 Mike Giunta: [EMAIL PROTECTED] x202 Th

Re: GPG Outlook Plug-In and Signatures

2006-10-14 Thread Mica Mijatovic
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Was Fri, 13 Oct 2006, at 23:36:43 -0400, when John wrote: > Alphax wrote: >> PGP/MIME capable mail clients /may/ handle it, but you'd have to >> actually try it to be certain. Such a test should be conducted off-list >> in order to avoid fl

Re: GPG Outlook Plug-In and Signatures

2006-10-13 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Alphax wrote: > PGP/MIME capable mail clients /may/ handle it, but you'd have to > actually try it to be certain. Such a test should be conducted off-list > in order to avoid flames for an HTML posting. I can't imagine anyone 'Flaming' an honest mi

Re: GPG Outlook Plug-In and Signatures

2006-10-13 Thread Alphax
Ryan Malayter wrote: >> >> HTML + OpenPGP = FAIL. >> >> In English: HTML screws up OpenPGP. You don't want it. There are other >> reasons why you don't want HTML anyway but I won't go into them here. > > > Actually, when I sign an HTML email with GPGOL, and send it to my > Gmail account, I seem t

Re: GPG Outlook Plug-In and Signatures

2006-10-13 Thread Ryan Malayter
HTML + OpenPGP = FAIL. In English: HTML screws up OpenPGP. You don't want it. There are other reasons why you don't want HTML anyway but I won't go into them here. Actually, when I sign an HTML email with GPGOL, and send it to my Gmail account, I seem to get this on the receiving end: 1) A p

Re: GPG Outlook Plug-In and Signatures

2006-10-12 Thread Alphax
Cary Wagner wrote: > When I try to digitally sign an email in Outlook, it changes my messages from > HTML to Plain Text. The messages are starting out as HTML when I am typing, > but I am guessing that as soon as I sign it, the message is being converted to > text. Is there a way to correct this?

GPG Outlook Plug-In and Signatures

2006-10-12 Thread Cary Wagner
When I try to digitally sign an email in Outlook, it changes my messages from HTML to Plain Text. The messages are starting out as HTML when I am typing, but I am guessing that as soon as I sign it, the message is being converted to text. Is there a way to correct this? Or, is the expected behav