From owner-ietf-openpgp@mail.imc.org  Mon Feb  5 10:17:32 2001
Received: from ns.secondary.com (ns.secondary.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id KAA08612
	for <openpgp-archive@odin.ietf.org>; Mon, 5 Feb 2001 10:17:32 -0500 (EST)
Received: by ns.secondary.com (8.9.3/8.9.3) id GAA08847
	for ietf-openpgp-bks; Mon, 5 Feb 2001 06:45:50 -0800 (PST)
Received: from mail.kiban.co.jp (ns1.kiban.co.jp [210.232.195.50])
	by ns.secondary.com (8.9.3/8.9.3) with SMTP id GAA08841
	for <ietf-openpgp@imc.org>; Mon, 5 Feb 2001 06:45:48 -0800 (PST)
From: b4h443@arabia.com
Received: from ns.mobiletel.net [63.46.223.184] by mail.kiban.co.jp
  (SMTPD32-4.07) id ACD22552007A; Mon, 05 Feb 2001 23:50:42 +0900
Message-ID: <0000712d5714$00000ac0$00003444@kate.ccohs.ca>
To: <lxtltpq0t7dtgjf5d@telmex.net.mx>
Subject: Brand New E-Mail pager for FR-EE!
Date: Mon, 05 Feb 2001 08:50:36 -0600
X-Priority: 3
X-MSMail-Priority: Normal
Reply-To: b4h443@arabia.com
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

Brand New E-Mail pager for FREE!

   No long term contract
   No activation fee
   No big prepayment of airtime
   No credit check

   PAGING AMERICA is going to give you absolutely Free the Brand new Motorola
   Accessmate E-Mail display pager. This is the top of the line PCS technology
   pager made today. This side viewable display pager has a retail value of
   $189.00and comes with its own e-mail address so you can receive your e-mails
   as well as alpha-numeric and numeric messages instantly where ever you are.
   Your new e-mail pager has features like 50,000 character memory, message time
   stamping, automatic garbled message correction, beeps or vibrates,
   incandescent backlight, saved message folder, a unique never out of range
   feature that allows your pager to retrieve messages sent earlier when your
   pager was out of range or turned completely off. You can also receive
   weather, news and sports .The Motorola e-mail pager is very small and uses
   only a single double A battery. All we ask before we ship you your Free pager
   is for you to allow us to provide the airtime for you. There is no long term
   contract or credit check. Airtime is month to month and can be cancelled at
   any time. This pager will comes pre-programmed with its own e-mail address as
   well as a local telephone number to receive numeric pages. This pager comes
   with a complete 30 day money back guarantee, if after receiving this pager
   you're not completely happy, send it back and receive a full refund.

   For immediate delivery call Paging America at toll free at 877-699-8545
















Brand New E-Mail pager for FREE!



From owner-ietf-openpgp@mail.imc.org  Mon Feb  5 20:08:49 2001
Received: from ns.secondary.com (ns.secondary.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id UAA21542
	for <openpgp-archive@odin.ietf.org>; Mon, 5 Feb 2001 20:08:49 -0500 (EST)
Received: by ns.secondary.com (8.9.3/8.9.3) id PAA08399
	for ietf-openpgp-bks; Mon, 5 Feb 2001 15:44:28 -0800 (PST)
Received: from m11.jersey.juno.com (m11.jersey.juno.com [64.136.16.74])
	by ns.secondary.com (8.9.3/8.9.3) with ESMTP id PAA08393
	for <ietf-openpgp@imc.org>; Mon, 5 Feb 2001 15:44:27 -0800 (PST)
Received: from cookie.juno.com by cookie.juno.com for <"xS5dSbQuAOKnbKF9wbUrHOxK9MFGP5NREcIV1d5kzZxmGOCpYqVnBA==">
Received: (from joe.tag@juno.com)
 by m11.jersey.juno.com (queuemail) id FVJ7CFKW; Mon, 05 Feb 2001 18:51:41 EST
To: ietf-openpgp@imc.org
Date: Mon, 5 Feb 2001 14:39:28 EST
Subject: Rijndael in PGP??? 
Message-ID: <20010205.143941.4799.0.joe.tag@juno.com>
X-Mailer: Juno 1.49
X-Juno-Line-Breaks: 0-9
From: "J. G. Tag,Jr." <joe.tag@juno.com>
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

Hello.  Forgive the question, I don't know 
whom else to ask. 

Is there anyone doing work to incorporate Rijndael
into PGP, to replace Rijndael with TripleDES (DES-EDE) ???

Thanks. 

>>> Joe Tag 


________________________________________________________________
GET INTERNET ACCESS FROM JUNO!
Juno offers FREE or PREMIUM Internet access for less!
Join Juno today!  For your FREE software, visit:
http://dl.www.juno.com/get/tagj.


From owner-ietf-openpgp@mail.imc.org  Mon Feb  5 20:27:30 2001
Received: from ns.secondary.com (ns.secondary.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id UAA21683
	for <openpgp-archive@odin.ietf.org>; Mon, 5 Feb 2001 20:27:30 -0500 (EST)
Received: by ns.secondary.com (8.9.3/8.9.3) id RAA11012
	for ietf-openpgp-bks; Mon, 5 Feb 2001 17:01:17 -0800 (PST)
Received: from natasha.sj.counterpane.com (natasha.sj.counterpane.com [63.196.29.130])
	by ns.secondary.com (8.9.3/8.9.3) with ESMTP id RAA11008
	for <ietf-openpgp@imc.org>; Mon, 5 Feb 2001 17:01:16 -0800 (PST)
Received: from natasha.sj.counterpane.com (root@localhost)
	by natasha.sj.counterpane.com with ESMTP id RAA02440;
	Mon, 5 Feb 2001 17:08:27 -0800 (PST)
Received: from [172.20.1.38] (eris.sj.counterpane.com [172.20.1.38])
	by natasha.sj.counterpane.com with ESMTP id RAA02436;
	Mon, 5 Feb 2001 17:08:26 -0800 (PST)
Mime-Version: 1.0
X-Sender: jon@63.73.97.162
Message-Id: <p04320401b6a4fed86218@[172.20.1.38]>
In-Reply-To: <20010205.143941.4799.0.joe.tag@juno.com>
References: <20010205.143941.4799.0.joe.tag@juno.com>
Date: Mon, 5 Feb 2001 17:08:18 -0800
To: "J. G. Tag,Jr." <joe.tag@juno.com>, ietf-openpgp@imc.org
From: Jon Callas <jon@callas.org>
Subject: Re: Rijndael in PGP???
Content-Type: text/plain; charset="us-ascii"
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

At 2:39 PM -0500 2/5/01, J. G. Tag,Jr. wrote:
>Hello.  Forgive the question, I don't know
>whom else to ask.
>
>Is there anyone doing work to incorporate Rijndael
>into PGP, to replace Rijndael with TripleDES (DES-EDE) ???
>

Yes, RFC 2440 already has specification in it for the AES, which is the
same thing as Rijndael.

	Jon



From owner-ietf-openpgp@mail.imc.org  Tue Feb  6 12:59:01 2001
Received: from ns.secondary.com (ns.secondary.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id MAA25399
	for <openpgp-archive@odin.ietf.org>; Tue, 6 Feb 2001 12:59:00 -0500 (EST)
Received: by ns.secondary.com (8.9.3/8.9.3) id JAA21667
	for ietf-openpgp-bks; Tue, 6 Feb 2001 09:23:16 -0800 (PST)
Received: from mercury.rus.uni-stuttgart.de (mercury.rus.uni-stuttgart.de [129.69.1.226])
	by ns.secondary.com (8.9.3/8.9.3) with ESMTP id JAA21662
	for <ietf-openpgp@imc.org>; Tue, 6 Feb 2001 09:23:11 -0800 (PST)
Received: from rusfw by mercury.rus.uni-stuttgart.de with local (Exim 3.12 #4)
	id 14QBow-0003ZU-00
	for ietf-openpgp@imc.org; Tue, 06 Feb 2001 18:22:26 +0100
To: ietf-openpgp@imc.org
Subject: Re: Rijndael in PGP???
References: <20010205.143941.4799.0.joe.tag@juno.com>
	<p04320401b6a4fed86218@[172.20.1.38]>
From: Florian Weimer <Florian.Weimer@RUS.Uni-Stuttgart.DE>
Date: 06 Feb 2001 18:22:26 +0100
In-Reply-To: <p04320401b6a4fed86218@[172.20.1.38]>
Message-ID: <tg4ry7vi99.fsf@mercury.rus.uni-stuttgart.de>
Lines: 14
User-Agent: Gnus/5.0808 (Gnus v5.8.8) Emacs/20.7
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

Jon Callas <jon@callas.org> writes:

> Yes, RFC 2440 already has specification in it for the AES, which is the
> same thing as Rijndael.

At the moment, AES and Rijndael are different things.  Of course, it's
unlikely that AES will become an entirely different algorithm, but
AFAIK, the official AES specification has not yet been released (so
changes in detail are still possible).

-- 
Florian Weimer 	                  Florian.Weimer@RUS.Uni-Stuttgart.DE
University of Stuttgart           http://cert.uni-stuttgart.de/
RUS-CERT                          +49-711-685-5973/fax +49-711-685-5898


From owner-ietf-openpgp@mail.imc.org  Tue Feb  6 21:46:44 2001
Received: from ns.secondary.com (ns.secondary.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id VAA08072
	for <openpgp-archive@odin.ietf.org>; Tue, 6 Feb 2001 21:46:43 -0500 (EST)
Received: by ns.secondary.com (8.9.3/8.9.3) id SAA18798
	for ietf-openpgp-bks; Tue, 6 Feb 2001 18:19:16 -0800 (PST)
Received: from m11.jersey.juno.com (m11.jersey.juno.com [64.136.16.74])
	by ns.secondary.com (8.9.3/8.9.3) with ESMTP id SAA18794
	for <ietf-openpgp@imc.org>; Tue, 6 Feb 2001 18:19:15 -0800 (PST)
Received: from cookie.juno.com by cookie.juno.com for <"xS5dSbQuAOKnbKF9wbUrHBb/BqBlfkfaV0Id376Y2vSZuURxz8r/Sg==">
Received: (from joe.tag@juno.com)
 by m11.jersey.juno.com (queuemail) id FVM2J4F2; Tue, 06 Feb 2001 21:25:40 EST
To: Florian.Weimer@RUS.Uni-Stuttgart.DE
Cc: ietf-openpgp@imc.org
Date: Tue, 6 Feb 2001 16:05:51 EST
Subject: Re: Rijndael in PGP???
Message-ID: <20010206.161356.4799.0.joe.tag@juno.com>
References: <20010205.143941.4799.0.joe.tag@juno.com>
	<tg4ry7vi99.fsf@mercury.rus.uni-stuttgart.de>
X-Mailer: Juno 1.49
X-Juno-Line-Breaks: 0-17,19-36
From: "J. G. Tag,Jr." <joe.tag@juno.com>
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

=== Feb. 6, 2001; 21:17 EST === 

Hello. I am interested in the subject, because 
I believe that both CAST-256 and Rijndael support
128 bit Plaintext/Ciphertext I/O, and 
because CAST was already incorporated into PGP 5.0+. 
I am on "the learning curve" and I apprecciate your
assistance.  Is there a "real development" effort 
being done to incorporate Rijndael into PGP? 
Let me know, please.  It's a project I may want 
to work on locally, in New Jersey, USA. 

Best regards. 

    Joe Tag,Jr. 

----- reply separator ----- 

On 06 Feb 2001 18:22:26 +0100 Florian Weimer
<Florian.Weimer@RUS.Uni-Stuttgart.DE> writes:
>Jon Callas <jon@callas.org> writes:
>
>> Yes, RFC 2440 already has specification in it for the AES, which is 
>the
>> same thing as Rijndael.
>
>At the moment, AES and Rijndael are different things.  Of course, it's
>unlikely that AES will become an entirely different algorithm, but
>AFAIK, the official AES specification has not yet been released (so
>changes in detail are still possible).
>
>-- 
>Florian Weimer 	                  
>Florian.Weimer@RUS.Uni-Stuttgart.DE
>University of Stuttgart           http://cert.uni-stuttgart.de/
>RUS-CERT                          +49-711-685-5973/fax 
>+49-711-685-5898

________________________________________________________________
GET INTERNET ACCESS FROM JUNO!
Juno offers FREE or PREMIUM Internet access for less!
Join Juno today!  For your FREE software, visit:
http://dl.www.juno.com/get/tagj.


From owner-ietf-openpgp@mail.imc.org  Tue Feb  6 22:11:05 2001
Received: from ns.secondary.com (ns.secondary.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id WAA08715
	for <openpgp-archive@odin.ietf.org>; Tue, 6 Feb 2001 22:11:04 -0500 (EST)
Received: by ns.secondary.com (8.9.3/8.9.3) id SAA19437
	for ietf-openpgp-bks; Tue, 6 Feb 2001 18:52:22 -0800 (PST)
Received: from finney.org (226-132.adsl2.netlojix.net [207.71.226.132])
	by ns.secondary.com (8.9.3/8.9.3) with ESMTP id SAA19432
	for <ietf-openpgp@imc.org>; Tue, 6 Feb 2001 18:52:21 -0800 (PST)
From: hal@finney.org
Received: (from hal@localhost)
	by finney.org (8.9.3/8.9.3) id SAA27032;
	Tue, 6 Feb 2001 18:58:26 -0800
Date: Tue, 6 Feb 2001 18:58:26 -0800
Message-Id: <200102070258.SAA27032@finney.org>
To: Florian.Weimer@RUS.Uni-Stuttgart.DE, joe.tag@juno.com
Subject: Re: Rijndael in PGP???
Cc: ietf-openpgp@imc.org
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

Yes, both the commercial version, PGP 7 from Network Associates, and
the free GPG (GNU Privacy Guard) already incorporate Rijndael.

Hal Finney


> Hello. I am interested in the subject, because 
> I believe that both CAST-256 and Rijndael support
> 128 bit Plaintext/Ciphertext I/O, and 
> because CAST was already incorporated into PGP 5.0+. 
> I am on "the learning curve" and I apprecciate your
> assistance.  Is there a "real development" effort 
> being done to incorporate Rijndael into PGP? 
> Let me know, please.  It's a project I may want 
> to work on locally, in New Jersey, USA. 


From owner-ietf-openpgp@mail.imc.org  Wed Feb  7 01:38:05 2001
Received: from ns.secondary.com (ns.secondary.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id BAA15269
	for <openpgp-archive@odin.ietf.org>; Wed, 7 Feb 2001 01:38:05 -0500 (EST)
Received: by ns.secondary.com (8.9.3/8.9.3) id WAA22717
	for ietf-openpgp-bks; Tue, 6 Feb 2001 22:14:23 -0800 (PST)
Received: from smtprelay3.adelphia.net (smtprelay3.adelphia.net [64.8.25.8])
	by ns.secondary.com (8.9.3/8.9.3) with ESMTP id WAA22713
	for <ietf-openpgp@imc.org>; Tue, 6 Feb 2001 22:14:21 -0800 (PST)
Received: from mwyoung ([24.48.233.14]) by
          smtprelay3.adelphia.net (Netscape Messaging Server 4.15) with
          SMTP id G8DHK200.FXU; Wed, 7 Feb 2001 00:50:26 -0500 
Message-ID: <004201c090ca$06938aa0$c23fa8c0@transarc.ibm.com>
From: "Michael Young" <mwy-pgpu89@the-youngs.org>
To: <pgp-users@cryptorights.org>
Cc: <ietf-openpgp@imc.org>
Subject: Limited utility of master/subkey
Date: Wed, 7 Feb 2001 00:51:32 -0500
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNED MESSAGE-----

Does PGP7 or GnuPG provide the ability to use a separate
passphrase for the master key and its subkeys?  I'd like to
use my master key rarely, for key-signing only, and protect
it with a passphrase that I almost never use.  I'd then use
(limited-lifetime) subkeys for everyday decryption.
Ideally, I'd be able to make a subkey for everyday signing
of messages.  The OpenPGP specification would appear to
allow this, but I don't see any commands for doing so in the
implementations.

As an experiment, I generated such a master/subkey set and
imported it into PGP 6.5.3.  I found that it couldn't decrypt
material encrypted to the encryption subkey.  I then tried
the passphrase-changing dialog, and it (quite reasonably)
complained about "the" passphrase being incorrect, but it
did change the master's passphrase.  Even though I had
changed the passphrases to match, I was unable decrypt until
I went through the passphrase-changing dialog yet again.

So, unless I'm missing something, it doesn't look like this
is possible.  I also see no way to generate a signing subkey.
Yes, I can create a completely separate key-signing key,
but this gives up the values of the master/subkey (notably,
being able to accumulate signatures on master/userId
relationships that automatically apply to all subkeys).
The very limited coupling available in the implementations
just doesn't buy very much.

Any thoughts?

-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Privacy 6.5.3

iQEVAwUBOoDiPGNDnIII+QUHAQFlvwf9EJHKflFzMzzKjEbh+K1raI5SdDYbVgXX
wDYxr3U6KxvDADXcsKVuKBqcaZoLBJe0zYipBcskdE9PQ1ApOrCnOSfF4UZCE7SZ
HvrQf54BQKcLYrWyrgF2eR5HJCCGold6ppDx0vlTMnJt73nfpA85+9inHDe6Ovx9
EmNo05+Tmy0E8UEA9w9BkA5fpovtxnY+GTi7O94CvxO9VRy6/5uiE24cX8Sp5Fof
+7ouBuMVUj4IIRgmvosGL5hpv3J4HethG6H6mTjWFZ7DtOFPGf42tbwrYIcJ8rzk
vNSM/0TpaihfSJN1XS9V1A1KkCMB8eEkfLs6HlB+ebHUvXuGcMAEtA==
=DmBj
-----END PGP SIGNATURE-----




From owner-ietf-openpgp@mail.imc.org  Wed Feb  7 09:25:03 2001
Received: from ns.secondary.com (ns.secondary.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id JAA00044
	for <openpgp-archive@odin.ietf.org>; Wed, 7 Feb 2001 09:25:03 -0500 (EST)
Received: by ns.secondary.com (8.9.3/8.9.3) id FAA09526
	for ietf-openpgp-bks; Wed, 7 Feb 2001 05:43:12 -0800 (PST)
Received: from kasiski.gnupg.de (porta.u64.de [194.77.88.106])
	by ns.secondary.com (8.9.3/8.9.3) with ESMTP id FAA09521
	for <ietf-openpgp@imc.org>; Wed, 7 Feb 2001 05:43:09 -0800 (PST)
Received: from (alberti.gnupg.de) [192.168.123.3] 
	by kasiski.gnupg.de with esmtp (Exim 3.16 #1 (Debian))
	id 14QVAo-0005Oa-00; Wed, 07 Feb 2001 15:02:18 +0100
Received: from wk by alberti.gnupg.de with local (Exim 3.12 #1 (Debian))
	id 14QV2q-0006fq-00; Wed, 07 Feb 2001 14:54:04 +0100
Date: Wed, 7 Feb 2001 14:54:04 +0100
From: Werner Koch <wk@gnupg.org>
To: ietf-openpgp@imc.org
Subject: Re: Limited utility of master/subkey
Message-ID: <20010207145404.G25510@alberti.gnupg.de>
Mail-Followup-To: ietf-openpgp@imc.org
References: <004201c090ca$06938aa0$c23fa8c0@transarc.ibm.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <004201c090ca$06938aa0$c23fa8c0@transarc.ibm.com>; from mwy-pgpu89@the-youngs.org on Wed, Feb 07, 2001 at 12:51:32AM -0500
X-PGP-KeyID: 621CC013
X-PGP-CertKey: A4D9 4E92 B098 6AB5 EE9D  CD75 5DE2 4996 5B03 58A2
X-Request-PGP: finger:wk@porta.u64.de
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

On Wed, 7 Feb 2001, Michael Young wrote:

> Does PGP7 or GnuPG provide the ability to use a separate
> passphrase for the master key and its subkeys?  I'd like to

GnuPG in part.  If the subkey's passphrase is different it will ask
you for this passphrase.  However, it is not possible to set a
different passphrase for a subkey.

There is a hack which allows you to create a secret key without a
usable primary key:  grep the FAQ for --export-secret-subkeys

> is possible.  I also see no way to generate a signing subkey.
> Yes, I can create a completely separate key-signing key,

You can do this with GnuPG, but there are probably some problems
using this sign-only subkey: currently GnuPG favors the primary key
for this.  This will be changed soon.

Ciao,

  Werner 

-- 
Werner Koch                                              <wk@gnupg.org>
GNU Privacy Guard                                (http://www.gnupg.org)
Free Software Foundation Europe              (http://www.fsfeurope.org)
           [Please see X-* mail header for OpenPGP key info]


From owner-ietf-openpgp@mail.imc.org  Wed Feb  7 20:42:55 2001
Received: from ns.secondary.com (ns.secondary.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id UAA13895
	for <openpgp-archive@odin.ietf.org>; Wed, 7 Feb 2001 20:42:55 -0500 (EST)
Received: by ns.secondary.com (8.9.3/8.9.3) id RAA18168
	for ietf-openpgp-bks; Wed, 7 Feb 2001 17:09:07 -0800 (PST)
Received: from konan.nsict.org (clive@[193.133.200.135])
	by ns.secondary.com (8.9.3/8.9.3) with SMTP id RAA18164
	for <ietf-openpgp@imc.org>; Wed, 7 Feb 2001 17:09:03 -0800 (PST)
Received: (from clive@localhost) by konan.nsict.org (sendmail/nsict) id BAA01994; Thu, 8 Feb 2001 01:10:59 GMT
Date: Thu, 8 Feb 2001 01:10:59 GMT
Message-Id: <200102080110.BAA01994@konan.nsict.org>
From: clive@nsict.org (Clive Jones)
Organization: National Society for the Inversion of Cuddly Tigers
To: pgp-users@cryptorights.org, ietf-openpgp@imc.org
In-reply-to: "Michael Young"'s message of Wed, 7 Feb 2001 00:51:32 -0500 <004201c090ca$06938aa0$c23fa8c0@transarc.ibm.com>
Subject: [PGP-USERS] Limited utility of master/subkey
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

"Michael Young" <mwy-pgpu89@the-youngs.org> wrote:
> Does PGP7 or GnuPG provide the ability to use a separate
> passphrase for the master key and its subkeys?  I'd like to
> use my master key rarely, for key-signing only, and protect
> it with a passphrase that I almost never use.  I'd then use
> (limited-lifetime) subkeys for everyday decryption.
> Ideally, I'd be able to make a subkey for everyday signing
> of messages.
[...]
> Any thoughts?

I don't think what you're trying to do is a good idea.

The basic premise is that you want to keep your key-signing key more
secure than your everyday decryption and message-signing keys. You
propose to do this by giving your key-signing key a different
passphrase - presumably one that is more secure?

You are naturally remembering passphrases rather than writing them
down, since you care about security so much. Since you can remember
the more secure passphrase, why not enjoy greater security by using
that passphrase for everything, rather than using a weaker passphrase
for the other parts?

- It means there are two passphrases to crack not just one.
    Not true. Anyone who obtains your key-signing key and determines
    its passphrase gains the authority to replace your message-signing
    and decryption keys, which is almost as useful to them anyway.
- It means that if your everyday passphrase is captured by a keyboard
  sniffer, your key-signing passphrase is still safe.
    True. On the other hand, you are still presumably going to use
    your key-signing passphrase on occasion, and your computer will be
    no more secure against sniffing when you do; anyone who is able to
    capture passphrases you type will probably get both.
- The everyday passphrase can be easier to type.
    True - just about the only thing I can see in favour of the
    scheme.

Remember that, of the passphrase and the secret key, the passphrase is
the weaker element of your protection from impersonation. If you are
taking extra precautions with your key-signing key, you should
seriously consider keeping it on a floppy or similar, rather than
leaving it on your PC - this is a much more significant improvement in
security than using a different passphrase.

If you're going to keep your key-signing secret key offline, you want
to be able to split apart the different secret subkeys of a key, too.

Isn't it far simpler just to make a separate key-signing key, rather
than looking for a way to do this with subkeys? This is certainly a
method a lot of people have used for years.

--Clive.


From owner-ietf-openpgp@mail.imc.org  Thu Feb  8 01:34:26 2001
Received: from ns.secondary.com (ns.secondary.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id BAA22196
	for <openpgp-archive@odin.ietf.org>; Thu, 8 Feb 2001 01:34:26 -0500 (EST)
Received: by ns.secondary.com (8.9.3/8.9.3) id WAA23493
	for ietf-openpgp-bks; Wed, 7 Feb 2001 22:00:08 -0800 (PST)
Received: from smtprelay1.adelphia.net (smtprelay1.adelphia.net [64.8.25.6])
	by ns.secondary.com (8.9.3/8.9.3) with ESMTP id WAA23489
	for <ietf-openpgp@imc.org>; Wed, 7 Feb 2001 22:00:07 -0800 (PST)
Received: from mwyoung ([24.48.233.14]) by
          smtprelay1.adelphia.net (Netscape Messaging Server 4.15) with
          SMTP id G8FCXU00.L6Y; Thu, 8 Feb 2001 01:05:54 -0500 
Message-ID: <00a801c09195$5f89e0c0$c23fa8c0@transarc.ibm.com>
From: "Michael Young" <mwy-pgpu89@the-youngs.org>
To: <pgp-users@cryptorights.org>, <ietf-openpgp@imc.org>
References: <200102080110.BAA01994@konan.nsict.org>
Subject: Re: [PGP-USERS] Limited utility of master/subkey
Date: Thu, 8 Feb 2001 01:06:39 -0500
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNED MESSAGE-----

Clive Jones wrote:
> I don't think what you're trying to do is a good idea.

I appreciate your concerns, but I do not share your conclusions.

The care I take with a key and its passphrase *is* related to its
value, which is in turn related to its lifetime.  I may use a simpler
passphrase for a key that deals with short-term messages than ones
that guard other personal data or that signs other keys.  I also
attach a shorter expiration time to those less valuable keys.
I also believe that the more a key is used, the greater chance
of a compromise to due malice *or accident*.
         
The ability to generate new subkeys seems to match my model.
If my subkey were always as valuable as my master key, why would
I ever generate another subkey?

If the keys have different values, why is it unreasonable to
allow different passphrases?  No, it's not the only (or even
best) way to mitigate risk, but I believe it can help.

You suggest:

> Isn't it far simpler just to make a separate key-signing key, rather
> than looking for a way to do this with subkeys? This is certainly a
> method a lot of people have used for years.

I am doing just that.  The *only* reason that it is simpler is that
the tools have this limitation.  This requires that human beings
recognize that these keys are related (or grant my key-signing key
greater trust than otherwise necessary).

When PGP moved to DSA/DH, this could have been the solution: simply
have two independent keys.  That would have been just as unwieldy.
The master/subkey approach recognizes the utility in the tools
understanding a relationship between the keys.  That utility does not
depend on the keys having equal value -- in fact, it suggests the
opposite -- nor does it depend on them having the same passphrase.

I'm not suggesting that the tools shouldn't make it easy for someone
to use the same passphrase for all the related keys -- clearly that
suits most people's needs.  I'm simply suggesting that they should
allow for more advanced use.  And certainly, when faced with
an imported OpenPGP-compliant master/subkey group with different
passphrases, it ought to behave reasonably.

And for what it's worth, GNUPG does behave.  (Thanks, Werner :-).
PGP6 does not.  I can't buy a personal PGP7 yet (or see source),
so for it, I can't say.

-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Privacy 6.5.3

iQEVAwUBOoI3ZWNDnIII+QUHAQFBjQf6A10ScY8GV9m6QiIg2pWQw450rJI2h4KN
wmbt5qi+sGnSttzk+kUroY+FKc2yfp1kmgW9Ru1RVIyUo7EU6gZEDc7MbQIt1vZE
i2sxtk8E/0dPyYF2hamlAqAMAkRocHiYrbAWHfVAKQRfYKlNVGrOnHnlrlcdjz/Y
d3zB6UxaJMReKk3tW+lsavd6ORtiaQDe7e0FZpoy+xsQwjmr3ZeuqY3BZt+74XOF
RzpqVwNh5E1pKKMFwRtvLNfYkY6guwICGmpnp2/s67VFEUKxVoeioRBDywg6Ibd3
ZYZZY0E0mZRQLwrL2zWB0dL5J4cxSbqTCf3QwSBTUspYfIMflMVs0w==
=zYrC
-----END PGP SIGNATURE-----




From owner-ietf-openpgp@mail.imc.org  Fri Feb  9 07:47:04 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id HAA14767
	for <openpgp-archive@odin.ietf.org>; Fri, 9 Feb 2001 07:47:03 -0500 (EST)
Received: by above.proper.com (8.9.3/8.9.3) id EAA01256
	for ietf-openpgp-bks; Fri, 9 Feb 2001 04:24:19 -0800 (PST)
Received: from ietf.org (odin.ietf.org [132.151.1.176])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id EAA01251
	for <ietf-openpgp@imc.org>; Fri, 9 Feb 2001 04:24:17 -0800 (PST)
Received: from CNRI.Reston.VA.US (localhost [127.0.0.1])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id HAA13839;
	Fri, 9 Feb 2001 07:24:20 -0500 (EST)
Message-Id: <200102091224.HAA13839@ietf.org>
Mime-Version: 1.0
Content-Type: Multipart/Mixed; Boundary="NextPart"
To: IETF-Announce: ;
Cc: ietf-openpgp@imc.org
From: Internet-Drafts@ietf.org
Reply-to: Internet-Drafts@ietf.org
Subject: I-D ACTION:draft-ietf-openpgp-mime-04.txt
Date: Fri, 09 Feb 2001 07:24:20 -0500
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

--NextPart

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the An Open Specification for Pretty Good Privacy Working Group of the IETF.

	Title		: MIME Security with OpenPGP
	Author(s)	: M. Elkins, D. Del Torto, R. Levien, T. Roessler
	Filename	: draft-ietf-openpgp-mime-04.txt
	Pages		: 12
	Date		: 08-Feb-01
	
This document describes how the OpenPGP Message Format [1] can be
used to provide privacy and authentication using the Multipurpose
Internet Mail Extensions (MIME) security content types described in
RFC1847 [2].
This draft is being discussed on the 'ietf-openpgp' mailing list.  To
join the list, send a message to <ietf-openpgp-request@imc.org> with
the single word 'subscribe' in the subject.  An archive of the
working group's list is located at <http://www.imc.org/ietf-openpgp>.

A URL for this Internet-Draft is:
http://www.ietf.org/internet-drafts/draft-ietf-openpgp-mime-04.txt

Internet-Drafts are also available by anonymous FTP. Login with the username
"anonymous" and a password of your e-mail address. After logging in,
type "cd internet-drafts" and then
	"get draft-ietf-openpgp-mime-04.txt".

A list of Internet-Drafts directories can be found in
http://www.ietf.org/shadow.html 
or ftp://ftp.ietf.org/ietf/1shadow-sites.txt


Internet-Drafts can also be obtained by e-mail.

Send a message to:
	mailserv@ietf.org.
In the body type:
	"FILE /internet-drafts/draft-ietf-openpgp-mime-04.txt".
	
NOTE:	The mail server at ietf.org can return the document in
	MIME-encoded form by using the "mpack" utility.  To use this
	feature, insert the command "ENCODING mime" before the "FILE"
	command.  To decode the response(s), you will need "munpack" or
	a MIME-compliant mail reader.  Different MIME-compliant mail readers
	exhibit different behavior, especially when dealing with
	"multipart" MIME messages (i.e. documents which have been split
	up into multiple messages), so check your local documentation on
	how to manipulate these messages.
		
		
Below is the data which will enable a MIME compliant mail reader
implementation to automatically retrieve the ASCII version of the
Internet-Draft.

--NextPart
Content-Type: Multipart/Alternative; Boundary="OtherAccess"

--OtherAccess
Content-Type: Message/External-body;
	access-type="mail-server";
	server="mailserv@ietf.org"

Content-Type: text/plain
Content-ID:	<20010208135948.I-D@ietf.org>

ENCODING mime
FILE /internet-drafts/draft-ietf-openpgp-mime-04.txt

--OtherAccess
Content-Type: Message/External-body;
	name="draft-ietf-openpgp-mime-04.txt";
	site="ftp.ietf.org";
	access-type="anon-ftp";
	directory="internet-drafts"

Content-Type: text/plain
Content-ID:	<20010208135948.I-D@ietf.org>

--OtherAccess--

--NextPart--




From owner-ietf-openpgp@mail.imc.org  Fri Feb  9 13:43:00 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id NAA28215
	for <openpgp-archive@odin.ietf.org>; Fri, 9 Feb 2001 13:43:00 -0500 (EST)
Received: by above.proper.com (8.9.3/8.9.3) id KAA24008
	for ietf-openpgp-bks; Fri, 9 Feb 2001 10:27:06 -0800 (PST)
Received: from mercury.rus.uni-stuttgart.de (mercury.rus.uni-stuttgart.de [129.69.1.226])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id KAA24004
	for <ietf-openpgp@imc.org>; Fri, 9 Feb 2001 10:27:05 -0800 (PST)
Received: from rusfw by mercury.rus.uni-stuttgart.de with local (Exim 3.12 #4)
	id 14RI8S-00030N-00; Fri, 09 Feb 2001 19:19:08 +0100
To: ietf-openpgp@imc.org
Cc: Thomas Roessler <roessler@does-not-exist.org>, Werner Koch <wk@gnupg.org>
Subject: Re: Finalizing OpenPGP/MIME?
References: <20010125111926.M15272@alberti.gnupg.de>
	<20010125.201205.28840690.kazu@iijlab.net>
	<20010125123933.Y15272@alberti.gnupg.de>
	<20010125.212506.71143274.kazu@iijlab.net>
	<20010125135932.L15272@alberti.gnupg.de>
From: Florian Weimer <Florian.Weimer@RUS.Uni-Stuttgart.DE>
Date: 09 Feb 2001 19:19:08 +0100
In-Reply-To: <20010125135932.L15272@alberti.gnupg.de>
Message-ID: <tgae7vbtyb.fsf@mercury.rus.uni-stuttgart.de>
Lines: 14
User-Agent: Gnus/5.0808 (Gnus v5.8.8) Emacs/20.7
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

Werner Koch <wk@gnupg.org> writes:

> > Or if you are suggesting just to set a bogus value to the micalg
> > parameter because it is meaningless, why don't you support the idea of
> > wildcard value?
> 
> I won't object against a wildcard or a new value "unknown"

What's your opinion, Thomas?

-- 
Florian Weimer 	                  Florian.Weimer@RUS.Uni-Stuttgart.DE
University of Stuttgart           http://cert.uni-stuttgart.de/
RUS-CERT                          +49-711-685-5973/fax +49-711-685-5898


From owner-ietf-openpgp@mail.imc.org  Fri Feb  9 13:44:52 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id NAA28263
	for <openpgp-archive@odin.ietf.org>; Fri, 9 Feb 2001 13:44:51 -0500 (EST)
Received: by above.proper.com (8.9.3/8.9.3) id KAA24219
	for ietf-openpgp-bks; Fri, 9 Feb 2001 10:32:16 -0800 (PST)
Received: from mercury.rus.uni-stuttgart.de (mercury.rus.uni-stuttgart.de [129.69.1.226])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id KAA24215
	for <ietf-openpgp@imc.org>; Fri, 9 Feb 2001 10:32:14 -0800 (PST)
Received: from rusfw by mercury.rus.uni-stuttgart.de with local (Exim 3.12 #4)
	id 14RIDS-00031G-00; Fri, 09 Feb 2001 19:24:18 +0100
To: ietf-openpgp@imc.org
Cc: Kazu Yamamoto <kazu@iijlab.net>, warlord@mit.edu, ietf-openpgp@imc.org,
        Florian Weimer <Florian.Weimer@RUS.Uni-Stuttgart.DE>
Subject: Re: some requests
References: <20010125100145.A4323@sobolev.does-not-exist.org>
From: Florian Weimer <Florian.Weimer@RUS.Uni-Stuttgart.DE>
Date: 09 Feb 2001 19:24:18 +0100
In-Reply-To: <20010125100145.A4323@sobolev.does-not-exist.org>
Message-ID: <tg66ijbtpp.fsf@mercury.rus.uni-stuttgart.de>
Lines: 26
User-Agent: Gnus/5.0808 (Gnus v5.8.8) Emacs/20.7
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

Thomas Roessler <roessler@does-not-exist.org> writes:

> I suppose that your preferred solution would be to mandate
> binary-mode signatures, so there is no need to give extra protection
> to trailing whitespace.  However, specifying this would mean that
> most current implementations don't conform to the spec, unless I'm
> severely mistaken.  Florian?

IMHO, the best solution is to use a new signature type (i.e. signature
on a MIME part) in RFC 2440bis:

   0x41: Signature of a MIME part.
       This means the signer owns it, created it, or certifies that it
       has not been modified.  The signature is calculated over the
       text data with its line endings[1] converted to <CR><LF> and
       trailing blank characters on each line removed.  Trailing blank
       lines are also removed.

Otherwise, we have to deal with this kind of problems for years.

[1] See comment in the next article.

-- 
Florian Weimer 	                  Florian.Weimer@RUS.Uni-Stuttgart.DE
University of Stuttgart           http://cert.uni-stuttgart.de/
RUS-CERT                          +49-711-685-5973/fax +49-711-685-5898


From owner-ietf-openpgp@mail.imc.org  Fri Feb  9 13:54:09 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id NAA28507
	for <openpgp-archive@odin.ietf.org>; Fri, 9 Feb 2001 13:54:09 -0500 (EST)
Received: by above.proper.com (8.9.3/8.9.3) id KAA23968
	for ietf-openpgp-bks; Fri, 9 Feb 2001 10:26:00 -0800 (PST)
Received: from mercury.rus.uni-stuttgart.de (mercury.rus.uni-stuttgart.de [129.69.1.226])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id KAA23961
	for <ietf-openpgp@imc.org>; Fri, 9 Feb 2001 10:25:58 -0800 (PST)
Received: from rusfw by mercury.rus.uni-stuttgart.de with local (Exim 3.12 #4)
	id 14RI7N-00030J-00; Fri, 09 Feb 2001 19:18:01 +0100
To: ietf-openpgp@imc.org
Cc: Kazu Yamamoto <kazu@iijlab.net>, ietf-openpgp@imc.org
Subject: Re: some requests
References: <20010125100145.A4323@sobolev.does-not-exist.org>
	<20010126.161912.74694380.kazu@iijlab.net>
	<20010126113815.C18321@sobolev.does-not-exist.org>
	<20010126115714.A21502@sobolev.does-not-exist.org>
From: Florian Weimer <Florian.Weimer@RUS.Uni-Stuttgart.DE>
Date: 09 Feb 2001 19:18:01 +0100
In-Reply-To: <20010126115714.A21502@sobolev.does-not-exist.org>
Message-ID: <tgelx7bu06.fsf@mercury.rus.uni-stuttgart.de>
Lines: 36
User-Agent: Gnus/5.0808 (Gnus v5.8.8) Emacs/20.7
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

Thomas Roessler <roessler@does-not-exist.org> writes:

>   Note: If any line begins with the string "From", it is strongly
>   suggested that either the Quoted-Printable or Base64 MIME encoding
>   be applied.  If Quoted-Printable is used, at least one of the
>   characters in the string should be encoded using the hexadecimal
>   coding rule.  This is because many mail transfer and delivery
>   agents treat "From " (the word "from" followed immediately by a
>   space character) as the start of a new message and thus insert a
>   right angle-bracket (>) in front of any line beginning with "From"
>   to distinguish this case, invalidating the signature.

Perhaps you can add the following text?

  If neither the Quoted-Printable nor Base64 MIME encoding is used,
  and the charset provides alternative encodings of ASCII characters,
  at least one characters in the string "From " shall be encoded in
  such a way.  Alternatively, if the charset provides (control)
  characters without visible or semantic effect, such characters shall
  be used to make the ASCII representation of the beginning of the
  line distinct from "From ".

AFAIK, ISO-2022-JP provides such noop characters (and UTF-7 provides
an alternative encoding for ASCII characters, with UTF-8, you could
use the BOM---which is, unfortunately, not without semantic effect,
but that's a Unicode design problem anyway).  This way, one of the
main problems which requires mandated Quoted-Printable encoding can be
addressed by ISO-2022-JP users, even if they use a 7bit CTE.

BTW: I've recently seen a line starting with "from " which was
mangled.  Your text does not indicate if 

-- 
Florian Weimer 	                  Florian.Weimer@RUS.Uni-Stuttgart.DE
University of Stuttgart           http://cert.uni-stuttgart.de/
RUS-CERT                          +49-711-685-5973/fax +49-711-685-5898


From owner-ietf-openpgp@mail.imc.org  Fri Feb  9 13:56:39 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id NAA28600
	for <openpgp-archive@odin.ietf.org>; Fri, 9 Feb 2001 13:56:38 -0500 (EST)
Received: by above.proper.com (8.9.3/8.9.3) id KAA24840
	for ietf-openpgp-bks; Fri, 9 Feb 2001 10:39:42 -0800 (PST)
Received: from mercury.rus.uni-stuttgart.de (mercury.rus.uni-stuttgart.de [129.69.1.226])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id KAA24836
	for <ietf-openpgp@imc.org>; Fri, 9 Feb 2001 10:39:40 -0800 (PST)
Received: from rusfw by mercury.rus.uni-stuttgart.de with local (Exim 3.12 #4)
	id 14RIKe-00032J-00
	for ietf-openpgp@imc.org; Fri, 09 Feb 2001 19:31:44 +0100
To: ietf-openpgp@imc.org
Subject: Text-mode signatures
From: Florian Weimer <Florian.Weimer@RUS.Uni-Stuttgart.DE>
Date: 09 Feb 2001 19:31:44 +0100
Message-ID: <tgwvazaesv.fsf@mercury.rus.uni-stuttgart.de>
Lines: 18
User-Agent: Gnus/5.0808 (Gnus v5.8.8) Emacs/20.7
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

From section 5.2.1 of RFC 2440bis:

   0x01: Signature of a canonical text document.
       This means the signer owns it, created it, or certifies that it
       has not been modified.  The signature is calculated over the
       text data with its line endings converted to <CR><LF> and
       trailing blanks removed.

What does 'line ending' mean in this context?  According to section
3.4, text has to be interpreted in UTF-8.  Which of the line endings
available with UTF-8 shall be converted to <CR><LF>?

What happens to trailing blank lines?

-- 
Florian Weimer 	                  Florian.Weimer@RUS.Uni-Stuttgart.DE
University of Stuttgart           http://cert.uni-stuttgart.de/
RUS-CERT                          +49-711-685-5973/fax +49-711-685-5898


From owner-ietf-openpgp@mail.imc.org  Fri Feb  9 22:09:51 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id WAA07675
	for <openpgp-archive@odin.ietf.org>; Fri, 9 Feb 2001 22:09:50 -0500 (EST)
Received: by above.proper.com (8.9.3/8.9.3) id SAA17254
	for ietf-openpgp-bks; Fri, 9 Feb 2001 18:58:44 -0800 (PST)
Received: from mgo.iij.ad.jp (root@mgo.iij.ad.jp [202.232.15.6])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id SAA17250
	for <ietf-openpgp@imc.org>; Fri, 9 Feb 2001 18:58:42 -0800 (PST)
Received: from ns.iij.ad.jp (root@ns.iij.ad.jp [192.168.2.8])
	by mgo.iij.ad.jp (8.8.8/MGO1.0) with ESMTP id LAA06820
	for <ietf-openpgp@imc.org>; Sat, 10 Feb 2001 11:58:47 +0900 (JST)
Received: from fs.iij.ad.jp (root@fs.iij.ad.jp [192.168.2.9]) by ns.iij.ad.jp (8.8.5/3.5Wpl7) with ESMTP id LAA25754 for <ietf-openpgp@imc.org>; Sat, 10 Feb 2001 11:58:46 +0900 (JST)
Received: from localhost (mine.iij.ad.jp [192.168.4.209]) by fs.iij.ad.jp (8.8.5/3.5Wpl7) with ESMTP id LAA01606 for <ietf-openpgp@imc.org>; Sat, 10 Feb 2001 11:58:46 +0900 (JST)
Date: Sat, 10 Feb 2001 11:59:54 +0900 (JST)
Message-Id: <20010210.115954.71114251.kazu@iijlab.net>
To: ietf-openpgp@imc.org
Subject: Re: some requests
From: Kazu Yamamoto (=?iso-2022-jp?B?GyRCOzNLXE9CSScbKEI=?=)
 <kazu@iijlab.net>
In-Reply-To: <tgelx7bu06.fsf@mercury.rus.uni-stuttgart.de>
References: <20010126113815.C18321@sobolev.does-not-exist.org>
	<20010126115714.A21502@sobolev.does-not-exist.org>
	<tgelx7bu06.fsf@mercury.rus.uni-stuttgart.de>
X-Mailer: Mew version 1.95b103 on Emacs 20.7 / Mule 4.1 (AOI)
Mime-Version: 1.0
Content-Type: Text/Plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>
Content-Transfer-Encoding: 7bit

From: Florian Weimer <Florian.Weimer@RUS.Uni-Stuttgart.DE>
Subject: Re: some requests

> AFAIK, ISO-2022-JP provides such noop characters (and UTF-7 provides
> an alternative encoding for ASCII characters, with UTF-8, you could
> use the BOM---which is, unfortunately, not without semantic effect,
> but that's a Unicode design problem anyway).  This way, one of the
> main problems which requires mandated Quoted-Printable encoding can be
> addressed by ISO-2022-JP users, even if they use a 7bit CTE.

Such encoding is possible. But I think redundant escape sequence is a
bad idea.

All in all, the problem of "From " is NOT a PGP/MIME issue, but a
Multipart/Signed issue (which covers PGP/MIME, S/MIME, MOSS). If
people want to include such a language, it should go to RFC 1847bis.

--Kazu


From owner-ietf-openpgp@mail.imc.org  Sat Feb 10 00:37:20 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id AAA10420
	for <openpgp-archive@odin.ietf.org>; Sat, 10 Feb 2001 00:37:19 -0500 (EST)
Received: (from majordomo@localhost)
	by above.proper.com (8.9.3/8.9.3) id VAA18891
	for ietf-openpgp-bks; Fri, 9 Feb 2001 21:23:52 -0800 (PST)
Received: from NEPTUNE.zucotto.com ([216.95.209.154])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id VAA18886
	for <ietf-openpgp@imc.org>; Fri, 9 Feb 2001 21:23:50 -0800 (PST)
Received: by NEPTUNE.zucotto.com with Internet Mail Service (5.5.2650.21)
	id <CTQSWKR5>; Sat, 10 Feb 2001 00:23:41 -0500
Message-ID: <FC0292EA4D13D34EA2E5FC728D70A8E3078C2A@NEPTUNE.zucotto.com>
From: Kulwinder Atwal <kulwinder.atwal@zucotto.com>
To: "'rohc@cdt.luth.se'" <rohc@cdt.luth.se>,
        "'confctrl@isi.edu'"
	 <confctrl@isi.edu>,
        "'spki@c2.net'" <spki@c2.net>,
        "'ietf-krb-wg@anl.gov'" <ietf-krb-wg@anl.gov>,
        "'ietf-openpgp@imc.org'"
	 <ietf-openpgp@imc.org>
Subject: FW: IP over Bluetooth for 50th Meeting of IETF. 
Date: Sat, 10 Feb 2001 00:23:40 -0500
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2650.21)
Content-Type: text/plain;
	charset="iso-8859-1"
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>



-----Original Message-----
From: Kulwinder Atwal 
Sent: Friday, February 09, 2001 7:03 PM
To: 'zeroconf@merit.edu'; seamoby@cdma-2000.org;
MOBILE-IP@STANDARDS.NORTELNETWORKS.COM; 'srvloc@srvloc.org';
'aaa-wg@merit.edu'; 'manet@itd.nrl.navy.mil'; 'ipsec@lists.tislabs.com';
'ipsec-policy@vpnc.org'; 'ietf-ipsra@vpnc.org'; 'ietf-sacred@imc.org';
'enum@ietf.org'; 'sigtran@standards.nortelnetworks.com';
'ietf@ietf.org'; 'IETF-Announce@ietf.org';
'BLUETOOTH-BOF@mailbag.cps.intel.com'
Cc: 'Thomas Narten'; Akers Ron-WRA001
Subject: BOF: IP over Bluetooth for 50th Meeting of IETF. 




Myself and Ron Akers have requested an IP over Bluetooth BOF for the 50th
Meeting of the IETF in Minneapolis.  The BOF will discuss the creation of a
IETF Working Group to investigate the most open and efficient way to place
IP over the Bluetooth Host Controller.

Current work in this area within the Bluetooth SIG concentrates on defining
IP over a set of other lower-layer stacks. Currently there are two options
defined by the Bluetoth SIG:

 Option 1: IP/PPP/RFCOM/L2CAP/Host Controller

 Option 2: IP/PAN Profile/L2CAP/Host Controller
 	   (where the PAN Profile is a Bluetooth SIG work in progress)
 

We are proposing that the IETF form a WG to define a more efficient way of
running IP over Bluetooth. In particular, IP would run
 over an IETF protocol over the Host Controller without L2CAP.  This option
may be adopted by the Bluetooth SIG at a later date as a Profile.  Since all
Bluetooth SIG Profiles are optional, a customer may choose any combination
of Profiles in a final product.  Further, since Bluetooth Working Groups
have it in their mandate to adopt protocols from other standards making
bodies such as the IETF, there exists a clear path for IETF work to be
adopted by the Bluetooth SIG.
 
Whereas the last BOF was informational only and organized by the Bluetooth
SIG itself, the objective of this BOF will be to foster innovation, and
speed progress by placing IP related protocol development within the IETF
and Bluetooth-specific protocol development
 within the Bluetooth SIG, by developing an IP over Bluetooth IETF Working
Group.
 
This effort will define its own way of running IP over Bluetooth, by
carefully selecting a set of Bluetooth protocols (freely available from
published specifications at
http://www.bluetooth.com/developer/specification/specification.asp) on which
to build IP.

Please join myself, Kulwinder Atwal, and Ron Akers on the pre-BOF mailing
list:
 
This site runs version 2.0.1 of the "Mailman" list manager.  
The following describes commands you can send to get
information about, and control your subscription to the lists at
this site. Note that much of the following can also be 
accomplished via the World Wide Web, at:

    http://internet.motlabs.com/mailman/listinfo/bluetooth

In particular, you can use the Web site to have your password sent to
your delivery address.

Email commands can be in the subject line or in the body 
of the message. The commands should be set to the following address:

  <bluetooth-request@internet.motlabs.com>

About the descriptions - words in "<>"s signify REQUIRED items and
words in "[]" denote OPTIONAL items.  Do not include the "<>"s or
"[]"s when you use the commands.

The following commands are valid:

    subscribe [password] [digest-option] [address=<address>]
        Subscribe to the mailing list.  Your password must be given to
        unsubscribe or change your options.  When you subscribe to the
        list, you'll be reminded of your password periodically.
        'digest-option' may be either: 'nodigest' or 'digest' (no
        quotes!)  If you wish to subscribe an address other than the
        address you send this request from, you may specify
        "address=<email address>" (no brackets around the email
        address, no quotes!)

    unsubscribe <password> [address]
        Unsubscribe from the mailing list.  Your password must match
        the one you gave when you subscribed.  If you are trying to
        unsubscribe from a different address than the one you
        subscribed from, you may specify it in the 'address' field.

    who
        See everyone who is on this mailing list.

    info
        View the introductory information for this list.

    lists
        See what mailing lists are run by this Mailman server.

    help
        This message.

    set <option> <on|off> <password> 
        Turn on or off list options.  Valid options are:

        ack:
            Turn this on to receive acknowledgement mail when you send
            mail to the list.

        digest:
            Receive mail from the list bundled together instead of one
            post at a time.

        plain:
            Get plain-text, not MIME-compliant, digests (only if
            digest is set)

        nomail:
            Stop delivering mail.  Useful if you plan on taking a
            short vacation.

        norcv:
            Turn this on to NOT receive posts you send to the list.
            Does not work if digest is set.

        hide:
            Conceals your address when people look at who is on this
            list.


    options
        Show the current values of your list options.

    password <oldpassword> <newpassword> 
        Change your list password.
    
    end or --
       Stop processing commands (good to do if your mailer
       automatically adds a signature file - it'll save you from a lot
       of cruft).


Commands should be sent to bluetooth-request@internet.motlabs.com

Questions and concerns for the attention of a person should be sent to

    bluetooth-admin@internet.motlabs.com



Kulwinder Atwal
Bluetooth Design
Zucotto Wireless Inc.
kulwinder.atwal@zucotto.com

------------------------------------------------------------
Ron Akers                               Voice :(847)576-7928
Networks and Infrastructure Research      FAX :(847)576-3240
Motorola Laboratories           email:ron.akers@motorola.com 
1301 Algonquin Rd, Rm 2246
Schaumburg, IL. 60196
------------------------------------------------------------


From owner-ietf-openpgp@mail.imc.org  Sun Feb 11 09:45:10 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id JAA09419
	for <openpgp-archive@odin.ietf.org>; Sun, 11 Feb 2001 09:45:09 -0500 (EST)
Received: by above.proper.com (8.9.3/8.9.3) id GAA20703
	for ietf-openpgp-bks; Sun, 11 Feb 2001 06:27:04 -0800 (PST)
Received: from mercury.rus.uni-stuttgart.de (mercury.rus.uni-stuttgart.de [129.69.1.226])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id GAA20698
	for <ietf-openpgp@imc.org>; Sun, 11 Feb 2001 06:27:02 -0800 (PST)
Received: from rusfw by mercury.rus.uni-stuttgart.de with local (Exim 3.12 #4)
	id 14RxL5-0000lE-00
	for ietf-openpgp@imc.org; Sun, 11 Feb 2001 15:18:55 +0100
To: ietf-openpgp@imc.org
Subject: Re: some requests
References: <20010126113815.C18321@sobolev.does-not-exist.org>
	<20010126115714.A21502@sobolev.does-not-exist.org>
	<tgelx7bu06.fsf@mercury.rus.uni-stuttgart.de>
	<20010210.115954.71114251.kazu@iijlab.net>
From: Florian Weimer <Florian.Weimer@RUS.Uni-Stuttgart.DE>
Date: 11 Feb 2001 15:18:55 +0100
In-Reply-To: <20010210.115954.71114251.kazu@iijlab.net>
Message-ID: <tgg0hle20g.fsf@mercury.rus.uni-stuttgart.de>
Lines: 31
User-Agent: Gnus/5.0808 (Gnus v5.8.8) Emacs/20.7
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-2022-jp
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

Kazu Yamamoto ($B;3K\OBI'(B) <kazu@iijlab.net> writes:

> From: Florian Weimer <Florian.Weimer@RUS.Uni-Stuttgart.DE>
> Subject: Re: some requests
> 
> > AFAIK, ISO-2022-JP provides such noop characters (and UTF-7 provides
> > an alternative encoding for ASCII characters, with UTF-8, you could
> > use the BOM---which is, unfortunately, not without semantic effect,
> > but that's a Unicode design problem anyway).  This way, one of the
> > main problems which requires mandated Quoted-Printable encoding can be
> > addressed by ISO-2022-JP users, even if they use a 7bit CTE.
> 
> Such encoding is possible. But I think redundant escape sequence is a
> bad idea.

Do you have a better suggestion?  Either the CTE has to take care of
"From " lines, or the charset.  I don't see many options here.

> All in all, the problem of "From " is NOT a PGP/MIME issue, but a
> Multipart/Signed issue (which covers PGP/MIME, S/MIME, MOSS). If
> people want to include such a language, it should go to RFC 1847bis.

Is a revision of RFC 1847 underway?  IMHO, it's better to deal with
these things now and mention them in OpenPGP/MIME (the strictness of
these requirements is perhaps open to debate, but the problems should
be mentioned and a set of possible solutions should be presented).

-- 
Florian Weimer 	                  Florian.Weimer@RUS.Uni-Stuttgart.DE
University of Stuttgart           http://cert.uni-stuttgart.de/
RUS-CERT                          +49-711-685-5973/fax +49-711-685-5898


From owner-ietf-openpgp@mail.imc.org  Mon Feb 12 05:07:54 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id FAA03202
	for <openpgp-archive@odin.ietf.org>; Mon, 12 Feb 2001 05:07:54 -0500 (EST)
Received: by above.proper.com (8.9.3/8.9.3) id BAA06449
	for ietf-openpgp-bks; Mon, 12 Feb 2001 01:50:51 -0800 (PST)
Received: from smtp2.nikoma.de (smtp2.nikoma.de [212.122.128.25])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id BAA06426
	for <ietf-openpgp@imc.org>; Mon, 12 Feb 2001 01:50:39 -0800 (PST)
Received: from sobolev.does-not-exist.org (dialin217.pg5-nt.frankfurt.nikoma.de [213.54.36.217])
	by smtp2.nikoma.de (8.9.3/8.9.3) with ESMTP id KAA33694;
	Mon, 12 Feb 2001 10:50:18 +0100 (CET)
	(envelope-from roessler@does-not-exist.org)
Received: by sobolev.does-not-exist.org (Postfix, from userid 1000)
	id 9857A2ED19; Mon, 12 Feb 2001 10:50:12 +0100 (CET)
Date: Mon, 12 Feb 2001 10:50:12 +0100
From: Thomas Roessler <roessler@does-not-exist.org>
To: Florian Weimer <Florian.Weimer@RUS.Uni-Stuttgart.DE>
Cc: ietf-openpgp@imc.org, Werner Koch <wk@gnupg.org>
Subject: Re: Finalizing OpenPGP/MIME?
Message-ID: <20010212105012.A27199@sobolev.does-not-exist.org>
Mail-Followup-To: Florian Weimer <Florian.Weimer@RUS.Uni-Stuttgart.DE>,
	ietf-openpgp@imc.org, Werner Koch <wk@gnupg.org>
References: <20010125111926.M15272@alberti.gnupg.de> <20010125.201205.28840690.kazu@iijlab.net> <20010125123933.Y15272@alberti.gnupg.de> <20010125.212506.71143274.kazu@iijlab.net> <20010125135932.L15272@alberti.gnupg.de> <tgae7vbtyb.fsf@mercury.rus.uni-stuttgart.de>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.3.14i
In-Reply-To: <tgae7vbtyb.fsf@mercury.rus.uni-stuttgart.de>; from Florian.Weimer@RUS.Uni-Stuttgart.DE on Fri, Feb 09, 2001 at 07:19:08PM +0100
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

On 2001-02-09 19:19:08 +0100, Florian Weimer wrote:

>>> Or if you are suggesting just to set a bogus value to the
>>> micalg parameter because it is meaningless, why don't you
>>> support the idea of wildcard value?

>> I won't object against a wildcard or a new value "unknown"

> What's your opinion, Thomas?

Introducing a wildcard value would make one-pass processing
impossible, and thus break basic design principles.  I.e., I'd
prefer to leave it like it's now.

-- 
Thomas Roessler			    <roessler@does-not-exist.org>


From owner-ietf-openpgp@mail.imc.org  Mon Feb 12 05:25:15 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id FAA03358
	for <openpgp-archive@odin.ietf.org>; Mon, 12 Feb 2001 05:25:14 -0500 (EST)
Received: by above.proper.com (8.9.3/8.9.3) id CAA08873
	for ietf-openpgp-bks; Mon, 12 Feb 2001 02:11:38 -0800 (PST)
Received: from mgo.iij.ad.jp (root@mgo.iij.ad.jp [202.232.15.6])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id CAA08864
	for <ietf-openpgp@imc.org>; Mon, 12 Feb 2001 02:11:36 -0800 (PST)
Received: from ns.iij.ad.jp (root@ns.iij.ad.jp [192.168.2.8])
	by mgo.iij.ad.jp (8.8.8/MGO1.0) with ESMTP id TAA02815
	for <ietf-openpgp@imc.org>; Mon, 12 Feb 2001 19:11:35 +0900 (JST)
Received: from fs.iij.ad.jp (root@fs.iij.ad.jp [192.168.2.9]) by ns.iij.ad.jp (8.8.5/3.5Wpl7) with ESMTP id TAA29752 for <ietf-openpgp@imc.org>; Mon, 12 Feb 2001 19:11:35 +0900 (JST)
Received: from localhost (mine.iij.ad.jp [192.168.4.209]) by fs.iij.ad.jp (8.8.5/3.5Wpl7) with ESMTP id TAA29128 for <ietf-openpgp@imc.org>; Mon, 12 Feb 2001 19:11:35 +0900 (JST)
Date: Mon, 12 Feb 2001 19:12:47 +0900 (JST)
Message-Id: <20010212.191247.74718089.kazu@iijlab.net>
To: ietf-openpgp@imc.org
Subject: Re: Finalizing OpenPGP/MIME?
From: Kazu Yamamoto (=?iso-2022-jp?B?GyRCOzNLXE9CSScbKEI=?=)
 <kazu@iijlab.net>
In-Reply-To: <20010212105012.A27199@sobolev.does-not-exist.org>
References: <20010125135932.L15272@alberti.gnupg.de>
	<tgae7vbtyb.fsf@mercury.rus.uni-stuttgart.de>
	<20010212105012.A27199@sobolev.does-not-exist.org>
X-Mailer: Mew version 1.95b103 on Emacs 20.7 / Mule 4.1 (AOI)
Mime-Version: 1.0
Content-Type: Text/Plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>
Content-Transfer-Encoding: 7bit

From: Thomas Roessler <roessler@does-not-exist.org>
Subject: Re: Finalizing OpenPGP/MIME?

> Introducing a wildcard value would make one-pass processing
> impossible, and thus break basic design principles.  I.e., I'd
> prefer to leave it like it's now.

Would you explain what "one-pass processing" means in your
terminology? And tell me which software does provide such a feature
actually?

--Kazu


From owner-ietf-openpgp@mail.imc.org  Mon Feb 12 06:15:19 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id GAA03575
	for <openpgp-archive@odin.ietf.org>; Mon, 12 Feb 2001 06:15:18 -0500 (EST)
Received: by above.proper.com (8.9.3/8.9.3) id DAA13500
	for ietf-openpgp-bks; Mon, 12 Feb 2001 03:02:30 -0800 (PST)
Received: from kasiski.gnupg.de (porta.u64.de [194.77.88.106])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id DAA13488
	for <ietf-openpgp@imc.org>; Mon, 12 Feb 2001 03:02:28 -0800 (PST)
Received: from uucp by kasiski.gnupg.de with local-rmail (Exim 3.16 #1 (Debian))
	id 14SGwx-0004kD-00; Mon, 12 Feb 2001 12:15:19 +0100
Received: from wk by alberti.gnupg.de with local (Exim 3.12 #1 (Debian))
	id 14SGme-0000dS-00; Mon, 12 Feb 2001 12:04:40 +0100
Date: Mon, 12 Feb 2001 12:04:40 +0100
From: Werner Koch <wk@gnupg.org>
To: ietf-openpgp@imc.org
Subject: Re: Finalizing OpenPGP/MIME?
Message-ID: <20010212120440.E1539@alberti.gnupg.de>
Mail-Followup-To: ietf-openpgp@imc.org
References: <20010125135932.L15272@alberti.gnupg.de> <tgae7vbtyb.fsf@mercury.rus.uni-stuttgart.de> <20010212105012.A27199@sobolev.does-not-exist.org> <20010212.191247.74718089.kazu@iijlab.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <20010212.191247.74718089.kazu@iijlab.net>; from kazu@iijlab.net on Mon, Feb 12, 2001 at 07:12:47PM +0900
X-PGP-KeyID: 621CC013
X-PGP-CertKey: A4D9 4E92 B098 6AB5 EE9D  CD75 5DE2 4996 5B03 58A2
X-Request-PGP: finger:wk@porta.u64.de
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

On Mon, 12 Feb 2001, Kazu Yamamoto wrote:

> From: Thomas Roessler <roessler@does-not-exist.org>
> Subject: Re: Finalizing OpenPGP/MIME?
> 
> > Introducing a wildcard value would make one-pass processing
> > impossible, and thus break basic design principles.  I.e., I'd

I would not say impossible but somewhat slower because you have to
hash the digest with all know hash algorithms.  

> Would you explain what "one-pass processing" means in your
> terminology? And tell me which software does provide such a feature

joe@bar$ nc -lp 4711 | mime-processing-pgm | viewer-or-whatever

joe@foo$ nc bar 4711 <large_signed_message

I am not sure whether this is a real life setup.  Sending large
messages MIME encoded is not that effective.   Most software creates
and parses MIME message in memory or uses temporary files.


-- 
Werner Koch                                              <wk@gnupg.org>
GNU Privacy Guard                                (http://www.gnupg.org)
Free Software Foundation Europe              (http://www.fsfeurope.org)
           [Please see X-* mail header for OpenPGP key info]



From owner-ietf-openpgp@mail.imc.org  Mon Feb 12 06:37:13 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id GAA03723
	for <openpgp-archive@odin.ietf.org>; Mon, 12 Feb 2001 06:37:13 -0500 (EST)
Received: by above.proper.com (8.9.3/8.9.3) id DAA17070
	for ietf-openpgp-bks; Mon, 12 Feb 2001 03:20:54 -0800 (PST)
Received: from smtp2.nikoma.de (smtp2.nikoma.de [212.122.128.25])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id DAA17065
	for <ietf-openpgp@imc.org>; Mon, 12 Feb 2001 03:20:52 -0800 (PST)
Received: from sobolev.does-not-exist.org (dialin199.pg12-nt.frankfurt.nikoma.de [213.54.43.199])
	by smtp2.nikoma.de (8.9.3/8.9.3) with ESMTP id MAA40131;
	Mon, 12 Feb 2001 12:20:38 +0100 (CET)
	(envelope-from roessler@does-not-exist.org)
Received: by sobolev.does-not-exist.org (Postfix, from userid 1000)
	id C87F52ED15; Mon, 12 Feb 2001 11:42:08 +0100 (CET)
Date: Mon, 12 Feb 2001 11:42:08 +0100
From: Thomas Roessler <roessler@does-not-exist.org>
To: Florian Weimer <Florian.Weimer@RUS.Uni-Stuttgart.DE>
Cc: ietf-openpgp@imc.org, Kazu Yamamoto <kazu@iijlab.net>, warlord@mit.edu
Subject: Re: some requests
Message-ID: <20010212114208.A4238@sobolev.does-not-exist.org>
Mail-Followup-To: Florian Weimer <Florian.Weimer@RUS.Uni-Stuttgart.DE>,
	ietf-openpgp@imc.org, Kazu Yamamoto <kazu@iijlab.net>,
	warlord@mit.edu
References: <20010125100145.A4323@sobolev.does-not-exist.org> <tg66ijbtpp.fsf@mercury.rus.uni-stuttgart.de>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.3.14i
In-Reply-To: <tg66ijbtpp.fsf@mercury.rus.uni-stuttgart.de>; from Florian.Weimer@RUS.Uni-Stuttgart.DE on Fri, Feb 09, 2001 at 07:24:18PM +0100
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

On 2001-02-09 19:24:18 +0100, Florian Weimer wrote:

> IMHO, the best solution is to use a new signature type (i.e.
> signature on a MIME part) in RFC 2440bis:

This won't help us, either.  After all, the "new-style" text-mode
signatures are nicely adapted to what we need with PGP/MIME.  The
problem is that we have incompatible text-mode signatures _now_.

-- 
Thomas Roessler			    <roessler@does-not-exist.org>


From owner-ietf-openpgp@mail.imc.org  Mon Feb 12 14:27:00 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id OAA19280
	for <openpgp-archive@odin.ietf.org>; Mon, 12 Feb 2001 14:26:59 -0500 (EST)
Received: by above.proper.com (8.9.3/8.9.3) id LAA15760
	for ietf-openpgp-bks; Mon, 12 Feb 2001 11:08:02 -0800 (PST)
Received: from smtp2.nikoma.de (smtp2.nikoma.de [212.122.128.25])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id LAA15752
	for <ietf-openpgp@imc.org>; Mon, 12 Feb 2001 11:08:00 -0800 (PST)
Received: from sobolev.does-not-exist.org (dialin38.pg5-nt.frankfurt.nikoma.de [213.54.36.38])
	by smtp2.nikoma.de (8.9.3/8.9.3) with ESMTP id UAA72320
	for <ietf-openpgp@imc.org>; Mon, 12 Feb 2001 20:08:00 +0100 (CET)
	(envelope-from roessler@does-not-exist.org)
Received: by sobolev.does-not-exist.org (Postfix, from userid 1000)
	id A42422ED15; Mon, 12 Feb 2001 19:38:24 +0100 (CET)
Date: Mon, 12 Feb 2001 19:38:24 +0100
From: Thomas Roessler <roessler@does-not-exist.org>
To: ietf-openpgp@imc.org
Subject: PGP 7.0 and PGP/MIME?
Message-ID: <20010212193824.A1046@sobolev.does-not-exist.org>
Mail-Followup-To: ietf-openpgp@imc.org
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.3.15i
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by above.proper.com id LAA15755
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>
Content-Transfer-Encoding: 8bit

I can't resist from forwarding this.  Is it really true that PGP
7.0's MUA plugins STILL don't get PGP/MIME right?  If so: Why? 


----- Forwarded message -----
From: <juergen@cavemaus.fiedlerfamily.net>
Newsgroups: comp.mail.mutt
Subject: Mutt, GnuPG and PGP/Win98
Date: Mon, 12 Feb 2001 18:11:10 -0000

Hi!

I am trying to communicate securely with someone who is using Win98.
She is mainly using Eudora with a PGP 7.0.x plugin, I am using mutt
1.2.5 with gnupg 1.0.4. 
The problem is thus:
When I send an encrypted message to her, it appears with an empty
body and 2 attachments: One just contains the string 'version 1.0',
the second one contains the actual message. Eudora/PGP can't deal
with that.
When she sends me an encrypted message, it shows up with content
type 'text/plain' and the whole encrypted message is in the body.
I can decrypt it by pressing the '|' key and then typing 'gpg',
but I know that mutt has the potential to automatically recognize
encrypted messages; it does it when I send messages to myself. But
those come from mutt, of course.

Does anyone know what we are doing wrong (besides our choice of
operating systems)? Any input would be appreciated.

Thanks,
j


---- End forwarded message-----

-- 
Thomas Roessler			    <roessler@does-not-exist.org>


From owner-ietf-openpgp@mail.imc.org  Mon Feb 12 17:04:42 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id RAA22573
	for <openpgp-archive@odin.ietf.org>; Mon, 12 Feb 2001 17:04:41 -0500 (EST)
Received: by above.proper.com (8.9.3/8.9.3) id NAA23528
	for ietf-openpgp-bks; Mon, 12 Feb 2001 13:44:10 -0800 (PST)
Received: from rcn.ihtfp.org (me@ORANGE-TOUR.IHTFP.ORG [204.107.200.33])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id NAA23523
	for <ietf-openpgp@imc.org>; Mon, 12 Feb 2001 13:44:06 -0800 (PST)
Received: (from warlord@localhost) by rcn.ihtfp.org (8.9.3)
	id QAA04284; Mon, 12 Feb 2001 16:43:54 -0500
To: Thomas Roessler <roessler@does-not-exist.org>
Cc: ietf-openpgp@imc.org
Subject: Re: PGP 7.0 and PGP/MIME?
References: <20010212193824.A1046@sobolev.does-not-exist.org>
From: Derek Atkins <warlord@mit.edu>
Date: 12 Feb 2001 16:43:54 -0500
In-Reply-To: Thomas Roessler's message of "Mon, 12 Feb 2001 19:38:24 +0100"
Message-ID: <sjm3ddjmvad.fsf@rcn.ihtfp.org>
Lines: 50
X-Mailer: Gnus v5.5/Emacs 20.3
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

This looks like it's not even trying to do PGP/MIME.

-derek

Thomas Roessler <roessler@does-not-exist.org> writes:

> I can't resist from forwarding this.  Is it really true that PGP
> 7.0's MUA plugins STILL don't get PGP/MIME right?  If so: Why? 
> 
> 
> ----- Forwarded message -----
> From: <juergen@cavemaus.fiedlerfamily.net>
> Newsgroups: comp.mail.mutt
> Subject: Mutt, GnuPG and PGP/Win98
> Date: Mon, 12 Feb 2001 18:11:10 -0000
> 
> Hi!
> 
> I am trying to communicate securely with someone who is using Win98.
> She is mainly using Eudora with a PGP 7.0.x plugin, I am using mutt
> 1.2.5 with gnupg 1.0.4. 
> The problem is thus:
> When I send an encrypted message to her, it appears with an empty
> body and 2 attachments: One just contains the string 'version 1.0',
> the second one contains the actual message. Eudora/PGP can't deal
> with that.
> When she sends me an encrypted message, it shows up with content
> type 'text/plain' and the whole encrypted message is in the body.
> I can decrypt it by pressing the '|' key and then typing 'gpg',
> but I know that mutt has the potential to automatically recognize
> encrypted messages; it does it when I send messages to myself. But
> those come from mutt, of course.
> 
> Does anyone know what we are doing wrong (besides our choice of
> operating systems)? Any input would be appreciated.
> 
> Thanks,
> j
> 
> 
> ---- End forwarded message-----
> 
> -- 
> Thomas Roessler			    <roessler@does-not-exist.org>

-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord@MIT.EDU                        PGP key available


From owner-ietf-openpgp@mail.imc.org  Mon Feb 12 17:47:44 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id RAA23352
	for <openpgp-archive@odin.ietf.org>; Mon, 12 Feb 2001 17:47:43 -0500 (EST)
Received: by above.proper.com (8.9.3/8.9.3) id OAA26027
	for ietf-openpgp-bks; Mon, 12 Feb 2001 14:34:22 -0800 (PST)
Received: from citicom.com (citicom.com [207.138.160.1])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id OAA26023
	for <ietf-openpgp@imc.org>; Mon, 12 Feb 2001 14:34:21 -0800 (PST)
Received: from dgal-ws1 (dgal-ws1.cust.citicom.com [207.138.162.226])
	by citicom.com (8.9.3/CITICOM-E) with SMTP id RAA27032
	for <ietf-openpgp@imc.org>; Mon, 12 Feb 2001 17:34:15 -0500
Message-Id: <200102122234.RAA27032@citicom.com>
Reply-To: <dgal@citicom.com>
From: "Damon Gallaty" <dgal@pgp.com>
To: <ietf-openpgp@imc.org>
Subject: RE: PGP 7.0 and PGP/MIME?
Date: Mon, 12 Feb 2001 17:34:07 -0500
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook 8.5, Build 4.71.2173.0
Importance: Normal
In-Reply-To: <20010212193824.A1046@sobolev.does-not-exist.org>
X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3110.3
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

There was a problem with PGP/MIME between the Eudora plug-in and Mutt
specifically, which has been fixed. PGP 7.0.3 should contain this fix.

- - Damon Gallaty


-----BEGIN PGP SIGNATURE-----
Version: PGP 7.0.3

iQA/AwUBOohkpFb/7csIIkCJEQIA/gCfUc5yDe/2JP0V1thZ2OUIMMxu2CAAoJNm
wlawVAmTgMqr91hBNcT3MrfC
=Tf4Z
-----END PGP SIGNATURE-----

> -----Original Message-----
> From: owner-ietf-openpgp@mail.imc.org
> [mailto:owner-ietf-openpgp@mail.imc.org]On Behalf Of Thomas Roessler
> Sent: Monday, February 12, 2001 1:38 PM
> To: ietf-openpgp@imc.org
> Subject: PGP 7.0 and PGP/MIME?
>
>
> I can't resist from forwarding this.  Is it really true that PGP
> 7.0's MUA plugins STILL don't get PGP/MIME right?  If so: Why?
>
>
> ----- Forwarded message -----
> From: <juergen@cavemaus.fiedlerfamily.net>
> Newsgroups: comp.mail.mutt
> Subject: Mutt, GnuPG and PGP/Win98
> Date: Mon, 12 Feb 2001 18:11:10 -0000
>
> Hi!
>
> I am trying to communicate securely with someone who is using Win98.
> She is mainly using Eudora with a PGP 7.0.x plugin, I am using mutt
> 1.2.5 with gnupg 1.0.4.
> The problem is thus:
> When I send an encrypted message to her, it appears with an empty
> body and 2 attachments: One just contains the string 'version 1.0',
> the second one contains the actual message. Eudora/PGP can't deal
> with that.
> When she sends me an encrypted message, it shows up with content
> type 'text/plain' and the whole encrypted message is in the body.
> I can decrypt it by pressing the '|' key and then typing 'gpg',
> but I know that mutt has the potential to automatically recognize
> encrypted messages; it does it when I send messages to myself. But
> those come from mutt, of course.
>
> Does anyone know what we are doing wrong (besides our choice of
> operating systems)? Any input would be appreciated.
>
> Thanks,
> j
>
>
> ---- End forwarded message-----
>
> --
> Thomas Roessler			    <roessler@does-not-exist.org>
>




From owner-ietf-openpgp@mail.imc.org  Tue Feb 13 06:44:39 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id GAA15271
	for <openpgp-archive@odin.ietf.org>; Tue, 13 Feb 2001 06:44:38 -0500 (EST)
Received: by above.proper.com (8.9.3/8.9.3) id DAA22413
	for ietf-openpgp-bks; Tue, 13 Feb 2001 03:26:30 -0800 (PST)
Received: from smtp2.nikoma.de (smtp2.nikoma.de [212.122.128.25])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id DAA22398
	for <ietf-openpgp@imc.org>; Tue, 13 Feb 2001 03:26:28 -0800 (PST)
Received: from sobolev.does-not-exist.org (dialin19.pg7-nt.frankfurt.nikoma.de [213.54.38.19])
	by smtp2.nikoma.de (8.9.3/8.9.3) with ESMTP id MAA22788;
	Tue, 13 Feb 2001 12:26:12 +0100 (CET)
	(envelope-from roessler@does-not-exist.org)
Received: by sobolev.does-not-exist.org (Postfix, from userid 1000)
	id BA3652ED15; Tue, 13 Feb 2001 12:26:10 +0100 (CET)
Date: Tue, 13 Feb 2001 12:26:10 +0100
From: Thomas Roessler <roessler@does-not-exist.org>
To: dgal@citicom.com
Cc: ietf-openpgp@imc.org
Subject: Re: PGP 7.0 and PGP/MIME?
Message-ID: <20010213122610.D5652@sobolev.does-not-exist.org>
Mail-Followup-To: dgal@citicom.com, ietf-openpgp@imc.org
References: <20010212193824.A1046@sobolev.does-not-exist.org> <200102122234.RAA27032@citicom.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.3.15i
In-Reply-To: <200102122234.RAA27032@citicom.com>; from dgal@pgp.com on Mon, Feb 12, 2001 at 05:34:07PM -0500
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

May I ask what kind of problem this was?

(I mean, the description from comp.mail.mutt - as Derek noted -
really sounds like no PGP/MIME was done at all.)

On 2001-02-12 17:34:07 -0500, Damon Gallaty wrote:
> Reply-To: <dgal@citicom.com>
> From: "Damon Gallaty" <dgal@pgp.com>
> To: <ietf-openpgp@imc.org>
> Subject: RE: PGP 7.0 and PGP/MIME?
> Date: Mon, 12 Feb 2001 17:34:07 -0500
> X-Mailer: Microsoft Outlook 8.5, Build 4.71.2173.0
> 
> There was a problem with PGP/MIME between the Eudora plug-in and Mutt
> specifically, which has been fixed. PGP 7.0.3 should contain this fix.
> 
> - Damon Gallaty
> 
> 
> 
> > -----Original Message-----
> > From: owner-ietf-openpgp@mail.imc.org
> > [mailto:owner-ietf-openpgp@mail.imc.org]On Behalf Of Thomas Roessler
> > Sent: Monday, February 12, 2001 1:38 PM
> > To: ietf-openpgp@imc.org
> > Subject: PGP 7.0 and PGP/MIME?
> >
> >
> > I can't resist from forwarding this.  Is it really true that PGP
> > 7.0's MUA plugins STILL don't get PGP/MIME right?  If so: Why?
> >
> >
> > ----- Forwarded message -----
> > From: <juergen@cavemaus.fiedlerfamily.net>
> > Newsgroups: comp.mail.mutt
> > Subject: Mutt, GnuPG and PGP/Win98
> > Date: Mon, 12 Feb 2001 18:11:10 -0000
> >
> > Hi!
> >
> > I am trying to communicate securely with someone who is using Win98.
> > She is mainly using Eudora with a PGP 7.0.x plugin, I am using mutt
> > 1.2.5 with gnupg 1.0.4.
> > The problem is thus:
> > When I send an encrypted message to her, it appears with an empty
> > body and 2 attachments: One just contains the string 'version 1.0',
> > the second one contains the actual message. Eudora/PGP can't deal
> > with that.
> > When she sends me an encrypted message, it shows up with content
> > type 'text/plain' and the whole encrypted message is in the body.
> > I can decrypt it by pressing the '|' key and then typing 'gpg',
> > but I know that mutt has the potential to automatically recognize
> > encrypted messages; it does it when I send messages to myself. But
> > those come from mutt, of course.
> >
> > Does anyone know what we are doing wrong (besides our choice of
> > operating systems)? Any input would be appreciated.
> >
> > Thanks,
> > j
> >
> >
> > ---- End forwarded message-----
> >
> > --
> > Thomas Roessler			    <roessler@does-not-exist.org>
> >
> 
> 

-- 
Thomas Roessler			    <roessler@does-not-exist.org>


From owner-ietf-openpgp@mail.imc.org  Tue Feb 13 08:16:09 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id IAA17180
	for <openpgp-archive@odin.ietf.org>; Tue, 13 Feb 2001 08:16:08 -0500 (EST)
Received: (from majordomo@localhost)
	by above.proper.com (8.9.3/8.9.3) id EAA29339
	for ietf-openpgp-bks; Tue, 13 Feb 2001 04:55:25 -0800 (PST)
Received: from smtp1.nikoma.de (smtp1.nikoma.de [212.122.128.19])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id EAA29335
	for <ietf-openpgp@imc.org>; Tue, 13 Feb 2001 04:55:23 -0800 (PST)
Received: from sobolev.does-not-exist.org (dialin124.pg7-nt.frankfurt.nikoma.de [213.54.38.124])
	by smtp1.nikoma.de (8.9.3/8.9.3) with ESMTP id NAA28291;
	Tue, 13 Feb 2001 13:55:19 +0100 (CET)
	(envelope-from roessler@does-not-exist.org)
Received: by sobolev.does-not-exist.org (Postfix, from userid 1000)
	id 2CB1C2ED19; Tue, 13 Feb 2001 13:54:28 +0100 (CET)
Date: Tue, 13 Feb 2001 13:54:27 +0100
From: Thomas Roessler <roessler@does-not-exist.org>
To: mail-client-dev-list@lists.sourceforge.net, pgp-mime@lists.uchicago.edu,
        coderpunks@toad.com
Cc: ietf-openpgp@imc.org
Subject: PGP/MIME implementors: text mode vs. binary mode?
Message-ID: <20010213135427.A9840@sobolev.does-not-exist.org>
Reply-To: ietf-openpgp@imc.org
Mail-Followup-To: ietf-openpgp@imc.org
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.3.15i
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

Please forward this message to any implementors of PGP/MIME you are
aware of.



To whom it may concern.

In the ietf-openpgp working group, we are about to finish a revised
version of RFC 2015.  While this looked like an easy task at first
sight, it is not, since OpenPGP breaks traditional pgp's text-mode
signatures.  This message is to solicit further input and comments
from other implementors of PGP/MIME.  (We thought we were done, but
then there were more arguments against the solution we believed to
have found...)

The current draft is draft-ietf-openpgp-mime-04.txt, and available
from: <http://www.ietf.org/internet-drafts/draft-ietf-openpgp-mime-04.txt>.

Please direct any answers to this message to the ietf-openpgp
mailing list.  In order to subscribe to that list, send a message to
<ietf-openpgp-request@imc.org> with the single word "subscribe" in
the subject.



The Problem.

To pgp 2 and 5, a text-mode signature meant that line endings were
transformed to a CR-LF sequence, and the result was then hashed.
However, with OpenPGP, preparing a text-mode signature has another
effect: Trailing blanks (and tabs?) are stripped - this is what used
to be done as a clear-sign signature with traditional PGP.  Of
course, this is a bug in the spec, but one which won't be easily
fixed now that all the implementations are out there.


Now, for PGP/MIME, this turns into a really ugly problem: RFC 2015
does not specify which kind of signature to use. However, it does
specify how the signed material should be canonicalized before
hashing.  This method of canonicalization exactly matched what was
done by traditional PGP versions for text mode signatures, which
means that the very same hash value could be used to verify either a
text-mode or a binary-mode signature.  That way, PGP/MIME according
to RFC 2015 and with traditional PGP had the desired one-pass
properties.

With OpenPGP, this construction breaks badly as soon as trailing
white space is involved.  Since it doesn't look right or elegant to
ask implementors of one-pass parsers (if they exist) to calculate
two hashes in parallel, some decision has to be made on the kind of
signature which should be mandated for the future.

I'm listing the choices and the pros and cons I'm seeing:

* text-mode signatures

  + easy to implement if you invoke a command-line tool to which you
    can leave the details of canonicalization.
  - Ian Bell of turnpike.com tells me that it's hard to persuade the
    PGP SDK to produce detached text-mode signatures.
  + the new-style text-mode signatures will nicely ignore any
    whitespace changes which are irrelevant to the message's content
    (When used the right way, MIME is invariant under modifications of
    trailing whitespace.)
  - there are incompatibilities between implementations which use
    text-mode AND leave trailing white space in messages.
  - thus, clients will need additional code in order to avoid
    trailing whitespace (e.g., apply quoted-printable).
  - this will make any clients non-compliant which are using binary
    mode today.

* binary-mode signatures

  + easy to implement if you use the PGP SDK (I'm told).
  + clients are interoperable regardless of the back-end version
    used and regardless of the treatment of trailing whitespace.
  - those people who rely on "pgp -t" will have to add some code to
    pass canonicalized data to the back-end.  In some cases, this
    may badly break things.
  - signatures will break upon changes to trailing white space which
    don't affect the message's content or MIME semantics
  - thus, clients may need additional code in order to avoid
    trailing whitespace (e.g., apply quoted-printable).
  - this will make any clients non-compliant which are using text
    mode today.

Bottom line: The decision what to mandate boils down to the question
what implementors prefer.  And, yes, both alternatives are bad
solutions.

Thus, if you are an implementor of PGP/MIME, please subscribe to the
ietf-openpgp mailing list, and let us know what should be done in
your opinion, and why.  Also, please tell us what mode you are using
nowadays, so we get a more precise impression of what software we
are going to break.


Thanks, and kind regards,
-- 
Thomas Roessler			    <roessler@does-not-exist.org>


From owner-ietf-openpgp@mail.imc.org  Tue Feb 13 09:23:30 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id JAA19510
	for <openpgp-archive@odin.ietf.org>; Tue, 13 Feb 2001 09:23:29 -0500 (EST)
Received: (from majordomo@localhost)
	by above.proper.com (8.9.3/8.9.3) id GAA05212
	for ietf-openpgp-bks; Tue, 13 Feb 2001 06:02:12 -0800 (PST)
Received: from citicom.com (citicom.com [207.138.160.1])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id GAA05205
	for <ietf-openpgp@imc.org>; Tue, 13 Feb 2001 06:02:10 -0800 (PST)
Received: from dgal-ws1 (dgal-ws1.cust.citicom.com [207.138.162.226])
	by citicom.com (8.9.3/CITICOM-E) with SMTP id JAA26581;
	Tue, 13 Feb 2001 09:01:38 -0500
Message-Id: <200102131401.JAA26581@citicom.com>
From: "Damon Gallaty" <dgal@citicom.com>
To: "Thomas Roessler" <roessler@does-not-exist.org>
Cc: <ietf-openpgp@imc.org>
Subject: RE: PGP 7.0 and PGP/MIME?
Date: Tue, 13 Feb 2001 09:01:30 -0500
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook 8.5, Build 4.71.2173.0
In-Reply-To: <20010213122610.D5652@sobolev.does-not-exist.org>
X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3110.3
Importance: Normal
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The problem was with sending PGP/MIME from Mutt and receiving it in Eudora.
The PGP plug-in was failing to recognize that the message contained
PGP/MIME. The other "problem" mentioned is not a bug at all. As you
probably guessed from Derek's note, the person sending from Eudora to Mutt
is not even using PGP/MIME. but instead is using the "classic" PGP format.
PGP/MIME is an option that the user can turn on or off in NAI PGP products,
since PGP/MIME is not universally recognized in all PGP plug-ins yet (not
even our own).

Before anyone asks, I'll answer the question: why don't all of NAI's PGP
plug-ins recognize PGP/MIME? The answer is that, in order to recognize
PGP/MIME, you must have access to the MIME headers, obviously.
Unfortunately, not all of the MUA's allow plug-ins to access the MIME
headers, thus there is no pratical way to parse or create PGP/MIME for
those MUA's. Outlook and Outlook Express are two examples of this.

- - Damon Gallaty

-----BEGIN PGP SIGNATURE-----
Version: PGP 7.0.3

iQA/AwUBOok961b/7csIIkCJEQK65ACguFlyxOVAZb2CGBgItiKn1uwhx0cAnRrf
uCnA1/uKwxuNOwJCbfx4KLhx
=Fi8k
-----END PGP SIGNATURE-----


> -----Original Message-----
> From: owner-ietf-openpgp@mail.imc.org
> [mailto:owner-ietf-openpgp@mail.imc.org]On Behalf Of Thomas Roessler
> Sent: Tuesday, February 13, 2001 6:26 AM
> To: dgal@citicom.com
> Cc: ietf-openpgp@imc.org
> Subject: Re: PGP 7.0 and PGP/MIME?
>
>
> May I ask what kind of problem this was?
>
> (I mean, the description from comp.mail.mutt - as Derek noted -
> really sounds like no PGP/MIME was done at all.)
>
> On 2001-02-12 17:34:07 -0500, Damon Gallaty wrote:
> > Reply-To: <dgal@citicom.com>
> > From: "Damon Gallaty" <dgal@pgp.com>
> > To: <ietf-openpgp@imc.org>
> > Subject: RE: PGP 7.0 and PGP/MIME?
> > Date: Mon, 12 Feb 2001 17:34:07 -0500
> > X-Mailer: Microsoft Outlook 8.5, Build 4.71.2173.0
> >
> > There was a problem with PGP/MIME between the Eudora plug-in and Mutt
> > specifically, which has been fixed. PGP 7.0.3 should contain this fix.
> >
> > - Damon Gallaty
> >
> >
> >
> > > -----Original Message-----
> > > From: owner-ietf-openpgp@mail.imc.org
> > > [mailto:owner-ietf-openpgp@mail.imc.org]On Behalf Of Thomas Roessler
> > > Sent: Monday, February 12, 2001 1:38 PM
> > > To: ietf-openpgp@imc.org
> > > Subject: PGP 7.0 and PGP/MIME?
> > >
> > >
> > > I can't resist from forwarding this.  Is it really true that PGP
> > > 7.0's MUA plugins STILL don't get PGP/MIME right?  If so: Why?
> > >
> > >
> > > ----- Forwarded message -----
> > > From: <juergen@cavemaus.fiedlerfamily.net>
> > > Newsgroups: comp.mail.mutt
> > > Subject: Mutt, GnuPG and PGP/Win98
> > > Date: Mon, 12 Feb 2001 18:11:10 -0000
> > >
> > > Hi!
> > >
> > > I am trying to communicate securely with someone who is using Win98.
> > > She is mainly using Eudora with a PGP 7.0.x plugin, I am using mutt
> > > 1.2.5 with gnupg 1.0.4.
> > > The problem is thus:
> > > When I send an encrypted message to her, it appears with an empty
> > > body and 2 attachments: One just contains the string 'version 1.0',
> > > the second one contains the actual message. Eudora/PGP can't deal
> > > with that.
> > > When she sends me an encrypted message, it shows up with content
> > > type 'text/plain' and the whole encrypted message is in the body.
> > > I can decrypt it by pressing the '|' key and then typing 'gpg',
> > > but I know that mutt has the potential to automatically recognize
> > > encrypted messages; it does it when I send messages to myself. But
> > > those come from mutt, of course.
> > >
> > > Does anyone know what we are doing wrong (besides our choice of
> > > operating systems)? Any input would be appreciated.
> > >
> > > Thanks,
> > > j
> > >
> > >
> > > ---- End forwarded message-----
> > >
> > > --
> > > Thomas Roessler			    <roessler@does-not-exist.org>
> > >
> >
> >
>
> --
> Thomas Roessler			    <roessler@does-not-exist.org>
>




From owner-ietf-openpgp@mail.imc.org  Tue Feb 13 09:46:41 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id JAA20320
	for <openpgp-archive@odin.ietf.org>; Tue, 13 Feb 2001 09:46:41 -0500 (EST)
Received: by above.proper.com (8.9.3/8.9.3) id GAA06121
	for ietf-openpgp-bks; Tue, 13 Feb 2001 06:22:22 -0800 (PST)
Received: from cdc-info.cdc.informatik.tu-darmstadt.de (cdc-info.cdc.informatik.tu-darmstadt.de [130.83.23.100])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id GAA06116
	for <ietf-openpgp@imc.org>; Tue, 13 Feb 2001 06:22:20 -0800 (PST)
Received: from cdc-ws1.cdc.informatik.tu-darmstadt.de (cdc-ws1 [130.83.23.129])
	by cdc-info.cdc.informatik.tu-darmstadt.de (Postfix) with ESMTP
	id 720D52C52; Tue, 13 Feb 2001 15:22:22 +0100 (MET)
Received: (from moeller@localhost)
	by cdc-ws1.cdc.informatik.tu-darmstadt.de (8.9.3+Sun/8.9.3) id PAA13720;
	Tue, 13 Feb 2001 15:22:33 +0100 (MET)
X-Authentication-Warning: cdc-ws1.cdc.informatik.tu-darmstadt.de: moeller set sender to bmoeller@hrzpub.tu-darmstadt.de using -f
Date: Tue, 13 Feb 2001 15:22:33 +0100
From: Bodo Moeller <bmoeller@hrzpub.tu-darmstadt.de>
To: ietf-openpgp@imc.org
Subject: Re: PGP/MIME implementors: text mode vs. binary mode?
Message-ID: <20010213152233.A13702@cdc.informatik.tu-darmstadt.de>
References: <20010213135427.A9840@sobolev.does-not-exist.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
User-Agent: Mutt/1.2i
In-Reply-To: <20010213135427.A9840@sobolev.does-not-exist.org>; from roessler@does-not-exist.org on Tue, Feb 13, 2001 at 01:54:27PM +0100
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>
X-MIME-Autoconverted: from 8bit to quoted-printable by above.proper.com id GAA06121
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by ietf.org id JAA20320

On Tue, Feb 13, 2001 at 01:54:27PM +0100, Thomas Roessler wrote:

[...]
> * text-mode signatures
[...]
>   - there are incompatibilities between implementations which use
>     text-mode AND leave trailing white space in messages.
>   - thus, clients will need additional code in order to avoid
>     trailing whitespace (e.g., apply quoted-printable).

There is no need to use quoted-printable to avoid trailing whitespace
in this case.  Applications that use text-mode signatures because they
consider trailing whitespace not significant can simply delete such
whitespace.  (Only in cases where you are worried about unauthorized
removal of whitespace but not about unauthorized addition of whitespace,
quoted-printable is required; e.g. "-- " signature separators.)

>   - this will make any clients non-compliant which are using binary
>     mode today.

This is true only if text-mode signatures are made mandatory.  An
alternative is to allow both text-mode and binary signatures, but to
impose restrictions on the data to be signed so that the respective
hashes coincide -- i.e., disallow trailing whitespace unless encoded
such that it is no longer trailing whitespace as far as OpenPGP is
concerned.


> * binary-mode signatures
[...]
>   + clients are interoperable regardless of the back-end version
>     used and regardless of the treatment of trailing whitespace.

The same is true if text-mode signatures are used and senders strictly
avoid trailing whitespace.

[...]
>   - this will make any clients non-compliant which are using text
>     mode today.

Again, this is only true only if binary-mode signatures are made
mandatory.  If both forms are legal, with the restriction the senders
have to avoid trailing unencoded whitespace (but recipients are not
required to strip any trailing whitespace before interpreting the
message), then it is up to the senders to decide if they want to use
binary-mode signatures as a countermeasure against addition of
whitespace in transit or if they think that text-mode signatures
suffice; and clients will still be able to verify signatures in a
single pass.


-- 
Bodo Möller <moeller@cdc.informatik.tu-darmstadt.de>
PGP http://www.informatik.tu-darmstadt.de/TI/Mitarbeiter/moeller/0x36d2c658.html
* TU Darmstadt, Theoretische Informatik, Alexanderstr. 10, D-64283 Darmstadt
* Tel. +49-6151-16-6628, Fax +49-6151-16-6036


From owner-ietf-openpgp@mail.imc.org  Tue Feb 13 10:26:04 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id KAA21699
	for <openpgp-archive@odin.ietf.org>; Tue, 13 Feb 2001 10:26:03 -0500 (EST)
Received: by above.proper.com (8.9.3/8.9.3) id HAA08520
	for ietf-openpgp-bks; Tue, 13 Feb 2001 07:06:32 -0800 (PST)
Received: from smtp1.nikoma.de (smtp1.nikoma.de [212.122.128.19])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id HAA08514
	for <ietf-openpgp@imc.org>; Tue, 13 Feb 2001 07:06:30 -0800 (PST)
Received: from sobolev.does-not-exist.org (dialin42.pg7-nt.frankfurt.nikoma.de [213.54.38.42])
	by smtp1.nikoma.de (8.9.3/8.9.3) with ESMTP id QAA37144;
	Tue, 13 Feb 2001 16:06:26 +0100 (CET)
	(envelope-from roessler@does-not-exist.org)
Received: by sobolev.does-not-exist.org (Postfix, from userid 1000)
	id 635E72ED19; Tue, 13 Feb 2001 15:11:18 +0100 (CET)
Date: Tue, 13 Feb 2001 15:11:18 +0100
From: Thomas Roessler <roessler@does-not-exist.org>
To: Damon Gallaty <dgal@citicom.com>
Cc: ietf-openpgp@imc.org
Subject: Re: PGP 7.0 and PGP/MIME?
Message-ID: <20010213151118.E11947@sobolev.does-not-exist.org>
Mail-Followup-To: Damon Gallaty <dgal@citicom.com>, ietf-openpgp@imc.org
References: <20010213122610.D5652@sobolev.does-not-exist.org> <200102131401.JAA26581@citicom.com>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
	protocol="application/pgp-signature"; boundary="M38YqGLZlgb6RLPS"
Content-Disposition: inline
User-Agent: Mutt/1.3.15i
In-Reply-To: <200102131401.JAA26581@citicom.com>; from dgal@citicom.com on Tue, Feb 13, 2001 at 09:01:30AM -0500
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>


--M38YqGLZlgb6RLPS
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On 2001-02-13 09:01:30 -0500, Damon Gallaty wrote:

> The problem was with sending PGP/MIME from Mutt and receiving it
> in Eudora. The PGP plug-in was failing to recognize that the
> message contained PGP/MIME.=20

I hope there was no bug on our (mutt's) side involved with this?

> The other "problem" mentioned is not a bug at all. As you
> probably guessed from Derek's note, the person sending from
> Eudora to Mutt is not even using PGP/MIME. but instead is using
> the "classic" PGP format. PGP/MIME is an option that the user can
> turn on or off in NAI PGP products, since PGP/MIME is not
> universally recognized in all PGP plug-ins yet (not even our
> own).

=46rom the Usenet article of this guy, there were two sides to the
problem:

- Eudora sending classical PGP messages tagged as text/plain.  This
  is, of course, the setting you describe.

- Eudora not at all recognizing PGP/MIME.  I hope this is indeed the
  bug you described, and not another consequence of not selecting
  PGP/MIME?

Cheers,
--=20
Thomas Roessler			    <roessler@does-not-exist.org>

--M38YqGLZlgb6RLPS
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3in

iQEVAwUBOolAhtImKUTOasbBAQETiAf/eDbkCm04BEPrA2/1Upb3hWNP+SGGBRzZ
k1zPGLKVgJcGnaBrKADx2NQtNE+KRXgMA7+wgooWhC326jlDkv6Ay7cDO5jwpDP+
v4iwu5BS0hEHqzW8VGUMX1k+C+SNTkFV/kr3W1Q5eR3H421D5zM7nrIZ7OTggyjE
11TZvhYJiaQzCPw9SMeFvSXBPg1LHE1v8vuXwNXQTKvHixT/9hkr3z3QKia7iigf
IU9CxA4TYAAiWI5e/fAqa8bcmw1nARoXOWQCHB+YPeFvVjfhJXG07KY/Stxl9GnG
rm7oY82hcPv/0YZrNsM2610KFKdnct+0WzbwUWgkW9ydmzVKwk91+g==
=cPqV
-----END PGP SIGNATURE-----

--M38YqGLZlgb6RLPS--


From owner-ietf-openpgp@mail.imc.org  Tue Feb 13 11:18:02 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id LAA23160
	for <openpgp-archive@odin.ietf.org>; Tue, 13 Feb 2001 11:18:01 -0500 (EST)
Received: (from majordomo@localhost)
	by above.proper.com (8.9.3/8.9.3) id IAA15062
	for ietf-openpgp-bks; Tue, 13 Feb 2001 08:00:49 -0800 (PST)
Received: from smtp1.nikoma.de (smtp1.nikoma.de [212.122.128.19])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id IAA15058
	for <ietf-openpgp@imc.org>; Tue, 13 Feb 2001 08:00:48 -0800 (PST)
Received: from sobolev.does-not-exist.org (dialin215.pg7-nt.frankfurt.nikoma.de [213.54.38.215])
	by smtp1.nikoma.de (8.9.3/8.9.3) with ESMTP id QAA40770;
	Tue, 13 Feb 2001 16:59:31 +0100 (CET)
	(envelope-from roessler@does-not-exist.org)
Received: by sobolev.does-not-exist.org (Postfix, from userid 1000)
	id B60482ED15; Tue, 13 Feb 2001 16:58:37 +0100 (CET)
Date: Tue, 13 Feb 2001 16:58:37 +0100
From: Thomas Roessler <roessler@does-not-exist.org>
To: Bodo Moeller <bmoeller@hrzpub.tu-darmstadt.de>
Cc: ietf-openpgp@imc.org
Subject: Re: PGP/MIME implementors: text mode vs. binary mode?
Message-ID: <20010213165837.A16525@sobolev.does-not-exist.org>
Mail-Followup-To: Bodo Moeller <bmoeller@hrzpub.tu-darmstadt.de>,
	ietf-openpgp@imc.org
References: <20010213135427.A9840@sobolev.does-not-exist.org> <20010213152233.A13702@cdc.informatik.tu-darmstadt.de>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
	protocol="application/pgp-signature"; boundary="1yeeQ81UyVL57Vl7"
Content-Disposition: inline
User-Agent: Mutt/1.3.15i
In-Reply-To: <20010213152233.A13702@cdc.informatik.tu-darmstadt.de>; from bmoeller@hrzpub.tu-darmstadt.de on Tue, Feb 13, 2001 at 03:22:33PM +0100
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>


--1yeeQ81UyVL57Vl7
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On 2001-02-13 15:22:33 +0100, Bodo Moeller wrote:

> Again, this is only true only if binary-mode signatures are made
> mandatory.  If both forms are legal, with the restriction the
> senders have to avoid trailing unencoded whitespace (but
> recipients are not required to strip any trailing whitespace
> before interpreting the message), then it is up to the senders to
> decide if they want to use binary-mode signatures as a
> countermeasure against addition of whitespace in transit or if
> they think that text-mode signatures suffice; and clients will
> still be able to verify signatures in a single pass.

This suggestion indeed sounds quite reasonable.  Thanks!


Actually, thinking a bit more about this, I think I found one case
in which trailing white space can make a semantic difference. (Which
would be another argument for mandating binary mode, however.)

More precisely, let's have a look at RFC822's grammar:

     field       =3D  field-name ":" [ field-body ] CRLF
     field-body  =3D  field-body-contents
     		    [CRLF LWSP-char field-body]
     field-body-contents =3D <the ASCII characters making up the
		    field-body, as defined in the following
		    sections, and consisting of combinations of
		    atom, quoted-string, and specials tokens, or
		    else consisting of texts>

field-body-contents can, in particular, consist entirely of
whitespace.

Example:

	^some-tag: some text$
	^    $
	^ some more text$
	^next-tag: ...$
	^$
	^body$

(^ marks the beginning of the line, $ the end of the line).

I.e., within an RFC822 header (which can in turn be any MIME header,
or a message header within a message/rfc822 body part), a line which
entirely consists of whitespace will be folded, and will - in
paritcular - _not_ separate the header from the body.  This
semantics will, of course, change if the MUA removes trailing white
space before the message is sent.  To make things still worse, we
can't even call quoted-printable or base64 to the rescue, since
nested encodings are explicitly prohibited.


What do you think - should we really worry about this, or should we
just put a warning into the Security Considerations section of the
text, pointing out that this case can happen and that
implementations should avoid it when sending messages, which is what
I'd suggest?

--=20
Thomas Roessler			    <roessler@does-not-exist.org>

--1yeeQ81UyVL57Vl7
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3in

iQEVAwUBOolZrdImKUTOasbBAQHIuQgAs1Z2O+y08AMMCtRMm7HN79rCHLdHvwvc
ApH/zDAtIwiRciRYaSs2+Uo838G6BEHdhzCTcMxCrK2GTIKmoaiiuf1nslqY3lUB
E72FriF0V2YCERqjBE0/qXRnWqBZFL0DzAlGoPjq498FRgCHxjFTduhyjQ57bcVn
vp1IXxd+5iJpocmvbF5np6UBwkiKYbVs/0qbDhHXUIjAr4mn/xLivyFRQyA43cB7
n7PJxeL6+a2hvzudNdgbqNLOmHnONjthmvBmIzH5CTonmIUBo/GKVxekveUkjxwI
LPJoI0NNnbSfegjMpuDjNnlqcCjuuhUtnN8geddnUJA9YgFpl+Xt8A==
=ME1X
-----END PGP SIGNATURE-----

--1yeeQ81UyVL57Vl7--


From owner-ietf-openpgp@mail.imc.org  Tue Feb 13 12:53:37 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id MAA25700
	for <openpgp-archive@odin.ietf.org>; Tue, 13 Feb 2001 12:53:36 -0500 (EST)
Received: by above.proper.com (8.9.3/8.9.3) id JAA19156
	for ietf-openpgp-bks; Tue, 13 Feb 2001 09:21:51 -0800 (PST)
Received: from finney.org (226-132.adsl2.netlojix.net [207.71.226.132])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id JAA19152
	for <ietf-openpgp@imc.org>; Tue, 13 Feb 2001 09:21:50 -0800 (PST)
From: hal@finney.org
Received: (from hal@localhost)
	by finney.org (8.9.3/8.9.3) id JAA01256
	for ietf-openpgp@imc.org; Tue, 13 Feb 2001 09:19:37 -0800
Date: Tue, 13 Feb 2001 09:19:37 -0800
Message-Id: <200102131719.JAA01256@finney.org>
To: ietf-openpgp@imc.org
Subject: Re: PGP/MIME implementors: text mode vs. binary mode?
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

Thomas, Roessler <roessler@does-not-exist.org>, writes:
> Now, for PGP/MIME, this turns into a really ugly problem: RFC 2015
> does not specify which kind of signature to use. However, it does
> specify how the signed material should be canonicalized before
> hashing.

I don't fully understand what you are saying here.  When you talk about
"what kind of signature to use", are you referring SOLELY to the value of
the signature-type byte within the signature packet?  This is the byte
which is described in RFC2440, section 5.2.1, as 0x00 for a signature
of a binary document, and 0x01 for a signature of a text document.

Is this the ONLY question as issue, what value to put into this byte?

Or, is there a separate question: what exactly should be hashed?

Above you say that RFC2015 specifies how the signed material should be
canonicalized before hashing.  If this is true, then the second question
is not at issue, because you'd have a precise specification of what
exactly should be hashed, for any given PGP/MIME message.

However I don't see that RFC2015bis does precisely specify what is hashed.
In section 5, it describes some canonicalization rules, and then says,

   (4)  As described in [2], the digital signature MUST be calculated
        over both the data to be signed and its set of content headers.

(where [2] is RFC1847, Security Multiparts for MIME).

This does not explicitly describe what is hashed.  Rather, it describes a
pre-processing step before calculating a digital signature over the data.
The question of what is hashed would then depend on what the signature
engine does to the data AFTER you have prepared it as described in
RFC2015.

In that case, the second question above, "what exactly should be hashed"
is an open one.

Could you clarify which of these questions is/are at issue?

Hal Finney


From owner-ietf-openpgp@mail.imc.org  Tue Feb 13 13:58:28 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id NAA27580
	for <openpgp-archive@odin.ietf.org>; Tue, 13 Feb 2001 13:58:27 -0500 (EST)
Received: by above.proper.com (8.9.3/8.9.3) id KAA23141
	for ietf-openpgp-bks; Tue, 13 Feb 2001 10:37:15 -0800 (PST)
Received: from smtp2.nikoma.de (smtp2.nikoma.de [212.122.128.25])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id KAA23136
	for <ietf-openpgp@imc.org>; Tue, 13 Feb 2001 10:37:14 -0800 (PST)
Received: from sobolev.does-not-exist.org (dialin240.pg5-nt.frankfurt.nikoma.de [213.54.36.240])
	by smtp2.nikoma.de (8.9.3/8.9.3) with ESMTP id TAA53929;
	Tue, 13 Feb 2001 19:37:03 +0100 (CET)
	(envelope-from roessler@does-not-exist.org)
Received: by sobolev.does-not-exist.org (Postfix, from userid 1000)
	id 68ECA2ED19; Tue, 13 Feb 2001 19:32:55 +0100 (CET)
Date: Tue, 13 Feb 2001 19:32:55 +0100
From: Thomas Roessler <roessler@does-not-exist.org>
To: hal@finney.org
Cc: ietf-openpgp@imc.org
Subject: Re: PGP/MIME implementors: text mode vs. binary mode?
Message-ID: <20010213193255.D16820@sobolev.does-not-exist.org>
Mail-Followup-To: hal@finney.org, ietf-openpgp@imc.org
References: <200102131719.JAA01256@finney.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.3.15i
In-Reply-To: <200102131719.JAA01256@finney.org>; from hal@finney.org on Tue, Feb 13, 2001 at 09:19:37AM -0800
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

On 2001-02-13 09:19:37 -0800, hal@finney.org wrote:
> Thomas, Roessler <roessler@does-not-exist.org>, writes:
>> Now, for PGP/MIME, this turns into a really ugly problem: RFC
>> 2015 does not specify which kind of signature to use. However,
>> it does specify how the signed material should be canonicalized
>> before hashing.

[...]

> In that case, the second question above, "what exactly should be
> hashed" is an open one.

> Could you clarify which of these questions is/are at issue?

With traditional PGP, a text mode signature means that PGP
canonicalizes line endings, and then calculate the hash over the
result.  A binary signature would just hash the raw data.

With OpenPGP, a text mode signature means that the implementation
strips trailing white space, canonicalizes line endings, and
caluclates the hash over the result.

Obviously, these text signatures are based on different hash values
as soon as any trailing white space is involved.

Now, what RFC 2015 does is to pre-canonicalize the signed material
in a way which lets the distinction between binary and
(traditional!) text mode signatures disappear, as far as the hashes
are concerned. Thus, a verifier can calculate a single hash without
knowing about the kind of signature, and then verify the signature
when it's encountered in the input stream.

My suggestion was now to mandate one of the signature modes, and
thus one way to hash the data.  However, as Bodo pointed out
correctly, it's most likely more reasonable to put in a further
restriction on the signed data, and leave the binary vs text
question unspecified.

-- 
Thomas Roessler			    <roessler@does-not-exist.org>


From owner-ietf-openpgp@mail.imc.org  Tue Feb 13 14:03:57 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id OAA27771
	for <openpgp-archive@odin.ietf.org>; Tue, 13 Feb 2001 14:03:55 -0500 (EST)
Received: by above.proper.com (8.9.3/8.9.3) id KAA23627
	for ietf-openpgp-bks; Tue, 13 Feb 2001 10:47:10 -0800 (PST)
Received: from gawth.com (IDENT:qmailr@[209.95.123.254])
	by above.proper.com (8.9.3/8.9.3) with SMTP id KAA23621
	for <ietf-openpgp@imc.org>; Tue, 13 Feb 2001 10:47:09 -0800 (PST)
Received: (qmail 1116 invoked by uid 524); 13 Feb 2001 19:57:46 -0000
Received: from localhost (sendmail-bs@127.0.0.1)
  by localhost with SMTP; 13 Feb 2001 19:57:46 -0000
Date: Tue, 13 Feb 2001 11:57:46 -0800 (PST)
From: Bram Cohen <bram@gawth.com>
To: ietf-openpgp@imc.org
cc: mail-client-dev-list@lists.sourceforge.net, pgp-mime@lists.uchicago.edu,
        coderpunks@toad.com
Subject: Re: PGP/MIME implementors: text mode vs. binary mode?
In-Reply-To: <20010213135427.A9840@sobolev.does-not-exist.org>
Message-ID: <Pine.LNX.4.21.0102131157020.32387-100000@ultra.gawth.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

On Tue, 13 Feb 2001, Thomas Roessler wrote:

> In the ietf-openpgp working group, we are about to finish a revised
> version of RFC 2015.  While this looked like an easy task at first
> sight, it is not, since OpenPGP breaks traditional pgp's text-mode
> signatures.

Good thing pgp is standardized, otherwise we might wind up with
incompatible implementations.

-Bram Cohen

"Markets can remain irrational longer than you can remain solvent"
                                        -- John Maynard Keynes



From owner-ietf-openpgp@mail.imc.org  Tue Feb 13 14:29:03 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id OAA28432
	for <openpgp-archive@odin.ietf.org>; Tue, 13 Feb 2001 14:29:02 -0500 (EST)
Received: by above.proper.com (8.9.3/8.9.3) id LAA25919
	for ietf-openpgp-bks; Tue, 13 Feb 2001 11:09:12 -0800 (PST)
Received: from rcn.ihtfp.org (me@ORANGE-TOUR.IHTFP.ORG [204.107.200.33])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id LAA25904
	for <ietf-openpgp@imc.org>; Tue, 13 Feb 2001 11:09:08 -0800 (PST)
Received: (from warlord@localhost) by rcn.ihtfp.org (8.9.3)
	id OAA15152; Tue, 13 Feb 2001 14:08:36 -0500
To: Bram Cohen <bram@gawth.com>
Cc: ietf-openpgp@imc.org, mail-client-dev-list@lists.sourceforge.net,
        pgp-mime@lists.uchicago.edu, coderpunks@toad.com
Subject: Re: PGP/MIME implementors: text mode vs. binary mode?
References: <Pine.LNX.4.21.0102131157020.32387-100000@ultra.gawth.com>
From: Derek Atkins <warlord@mit.edu>
Date: 13 Feb 2001 14:08:36 -0500
In-Reply-To: Bram Cohen's message of "Tue, 13 Feb 2001 11:57:46 -0800 (PST)"
Message-ID: <sjmae7ql7t7.fsf@rcn.ihtfp.org>
Lines: 14
X-Mailer: Gnus v5.5/Emacs 20.3
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

Bram Cohen <bram@gawth.com> writes:

> Good thing pgp is standardized, otherwise we might wind up with
> incompatible implementations.

The wonderful thing about standards... There are so many to choose from!
;)

-derek
-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord@MIT.EDU                        PGP key available


From owner-ietf-openpgp@mail.imc.org  Tue Feb 13 14:29:18 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id OAA28461
	for <openpgp-archive@odin.ietf.org>; Tue, 13 Feb 2001 14:29:18 -0500 (EST)
Received: by above.proper.com (8.9.3/8.9.3) id LAA25986
	for ietf-openpgp-bks; Tue, 13 Feb 2001 11:09:45 -0800 (PST)
Received: from finney.org (226-132.adsl2.netlojix.net [207.71.226.132])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id LAA25979
	for <ietf-openpgp@imc.org>; Tue, 13 Feb 2001 11:09:44 -0800 (PST)
From: hal@finney.org
Received: (from hal@localhost)
	by finney.org (8.9.3/8.9.3) id LAA02731;
	Tue, 13 Feb 2001 11:07:30 -0800
Date: Tue, 13 Feb 2001 11:07:30 -0800
Message-Id: <200102131907.LAA02731@finney.org>
To: hal@finney.org, roessler@does-not-exist.org
Subject: Re: PGP/MIME implementors: text mode vs. binary mode?
Cc: ietf-openpgp@imc.org
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

There is something I'm still missing.

The signature block at the bottom of the PGP/MIME signed message has
a signature type byte in it, text vs binary.  Is it your assumption
that the value in this type byte should control the hashing of the
textual data which is earlier in the message?

I don't know if this has to be true, but it may be helpful for
implementations if it is true.

In that case there are two possibilities.  One is to mandate the value
in this type byte, and thereby mandate the hashing which is done in the
message.  Receivers would hash the message data according to the spec,
and then when they came to the type byte, they could either ignore it
or check it and complain if it is the wrong value.

The second possibility is to allow either value in this type byte, and
thereby require that the receiver read the signature before it goes back
and hashes the data (or else hash the data both ways).

Are these the alternatives as you see them?

Hal


From owner-ietf-openpgp@mail.imc.org  Tue Feb 13 15:16:30 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id PAA29495
	for <openpgp-archive@odin.ietf.org>; Tue, 13 Feb 2001 15:16:29 -0500 (EST)
Received: (from majordomo@localhost)
	by above.proper.com (8.9.3/8.9.3) id LAA28538
	for ietf-openpgp-bks; Tue, 13 Feb 2001 11:52:53 -0800 (PST)
Received: from smtp2.nikoma.de (smtp2.nikoma.de [212.122.128.25])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id LAA28533
	for <ietf-openpgp@imc.org>; Tue, 13 Feb 2001 11:52:51 -0800 (PST)
Received: from sobolev.does-not-exist.org (dialin42.pg5-nt.frankfurt.nikoma.de [213.54.36.42])
	by smtp2.nikoma.de (8.9.3/8.9.3) with ESMTP id UAA59902;
	Tue, 13 Feb 2001 20:52:48 +0100 (CET)
	(envelope-from roessler@does-not-exist.org)
Received: by sobolev.does-not-exist.org (Postfix, from userid 1000)
	id 8D0542ED15; Tue, 13 Feb 2001 20:51:55 +0100 (CET)
Date: Tue, 13 Feb 2001 20:51:55 +0100
From: Thomas Roessler <roessler@does-not-exist.org>
To: hal@finney.org
Cc: ietf-openpgp@imc.org
Subject: Re: PGP/MIME implementors: text mode vs. binary mode?
Message-ID: <20010213205155.M16820@sobolev.does-not-exist.org>
Mail-Followup-To: hal@finney.org, ietf-openpgp@imc.org
References: <200102131907.LAA02731@finney.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.3.15i
In-Reply-To: <200102131907.LAA02731@finney.org>; from hal@finney.org on Tue, Feb 13, 2001 at 11:07:30AM -0800
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

On 2001-02-13 11:07:30 -0800, hal@finney.org wrote:

> The signature block at the bottom of the PGP/MIME signed message
> has a signature type byte in it, text vs binary.  Is it your
> assumption that the value in this type byte should control the
> hashing of the textual data which is earlier in the message?

Yes, of course.

> I don't know if this has to be true, but it may be helpful for
> implementations if it is true.

If I sign a document in binary-mode, I want to be informed if
someone changes white space, or if line ends change. That is, in my
understanding, the type byte in the signature must mandate the kind
of hashing to be done - otherwise, it wouldn't terribly useful.

> In that case there are two possibilities.  One is to mandate the
> value in this type byte, and thereby mandate the hashing which is
> done in the message.  Receivers would hash the message data
> according to the spec, and then when they came to the type byte,
> they could either ignore it or check it and complain if it is the
> wrong value.

Right.

> The second possibility is to allow either value in this type
> byte, and thereby require that the receiver read the signature
> before it goes back and hashes the data (or else hash the data
> both ways).

> Are these the alternatives as you see them?

Basically, yes.  Hashing the data in different ways doesn't look
very elegant, and going back to the data is not an option, either
(at least in theory).

In order to avoid these two approaches, we either have to mandate
the kind hash to be taken, or we have to make sure that both ways of
taking hashes are identical on the data to be considered.


Symbolically: Take the message m, and let || denote concatenation.
In this case, a hash used in a binary signature is just this:

(b)	hash-function (m || 
		some-properties (signature packet)),

A hash used in a text signature, however, is:

(t)	hash-function (strip-whitespace-and-canonicalize (m) ||
		some-properties (signature packet))

My approach was to mandate use of either (b) or (t). Bodo's
(better!) approach is that m is invariant under
strip-whitespace-and-canonicalize, i.e.,

	m = strip-whitespace-and-canonicalize (m),

by choosing m appropriately; this is the same basic approach which
is also used in RFC 2015.

(However, there it's not strip-whitespace-and-canonicalize, but just
canonicalize.  Also, the same canonicalization as everywhere else in
MIME world can be applied, which makes RFC 2015 more elegant than
its successor.)

Finally, since hash-function (a, b) can also be written in the form

	hash-function' (hash-function'' (a), b),

implementations can just calculate hash-function'' (m), and put in
some-properties (signature packet) when they encounter the
signature.

-- 
Thomas Roessler			    <roessler@does-not-exist.org>


From owner-ietf-openpgp@mail.imc.org  Tue Feb 13 15:32:32 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id PAA29800
	for <openpgp-archive@odin.ietf.org>; Tue, 13 Feb 2001 15:32:31 -0500 (EST)
Received: (from majordomo@localhost)
	by above.proper.com (8.9.3/8.9.3) id MAA29600
	for ietf-openpgp-bks; Tue, 13 Feb 2001 12:14:38 -0800 (PST)
Received: from rcn.ihtfp.org (me@ORANGE-TOUR.IHTFP.ORG [204.107.200.33])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id MAA29593
	for <ietf-openpgp@imc.org>; Tue, 13 Feb 2001 12:14:34 -0800 (PST)
Received: (from warlord@localhost) by rcn.ihtfp.org (8.9.3)
	id PAA15214; Tue, 13 Feb 2001 15:14:28 -0500
To: hal@finney.org
Cc: roessler@does-not-exist.org, ietf-openpgp@imc.org
Subject: Re: PGP/MIME implementors: text mode vs. binary mode?
References: <200102131907.LAA02731@finney.org>
From: Derek Atkins <warlord@mit.edu>
Date: 13 Feb 2001 15:14:28 -0500
In-Reply-To: hal@finney.org's message of "Tue, 13 Feb 2001 11:07:30 -0800"
Message-ID: <sjm4rxyl4rf.fsf@rcn.ihtfp.org>
Lines: 75
X-Mailer: Gnus v5.5/Emacs 20.3
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

Hal,

The point is that when PGP/MIME was created with PGP 2.x (RFC1991),
the PGP/MIME canonicalization was such that it didn't matter which
type-byte you used; the hash would be the same.  The problem is that
OpenPGP (RFC2440) changes the definition of a text signature (please
excuse me for not quoting the exact type-byte value).

Because of this change, it is possible to create a text-signature with
OpenPGP that will fail with PGP 2.x (and vise-versa).  The major
difference is that RFC2440 specifies that you do not hash trailing
white-space (whereas in RFC1991 trailing white space was included in
the hash).

So here is the problem.  PGP/MIME specifies text canonicalization to
make binary and text signatures hash into the same value for RFC1991
signatures.  However, this is not the same for RFC2440 signatures.
The problem is that implementations want to be able to hash the
message in a single-pass, before they read the signature type-byte
from the signature.  Moreover, implementations want to hash the
message only once.

So, how do we maintain compatibility of PGP/MIME between RFC1991 and
RFC2440 versions of PGP, while maintaining the pre-hash, single-pass
processing?  As have been argued, there are a few ways to do this:

	a) specify a canonicalization and require binary sigs.
	   Unfortunately this invalidates a number of implementations
	   that currently use text sigs.

	b) specify a canonicalization that matches text and allow
	   either binary or text sigs.  Unfortunately this has the
	   problem that RFC1991 and RFC2440 have different ideas of
	   what should be included in a text-mode signature.

	c) Change the PGP/MIME canonicalization requirements to match
	   RFC2440 text-mode.  This has the effect that previous
	   messages (and probably many implementations) wont be
	   PGP/MIME compliant.

I don't know what the best way is.

-derek

hal@finney.org writes:

> There is something I'm still missing.
> 
> The signature block at the bottom of the PGP/MIME signed message has
> a signature type byte in it, text vs binary.  Is it your assumption
> that the value in this type byte should control the hashing of the
> textual data which is earlier in the message?
> 
> I don't know if this has to be true, but it may be helpful for
> implementations if it is true.
> 
> In that case there are two possibilities.  One is to mandate the value
> in this type byte, and thereby mandate the hashing which is done in the
> message.  Receivers would hash the message data according to the spec,
> and then when they came to the type byte, they could either ignore it
> or check it and complain if it is the wrong value.
> 
> The second possibility is to allow either value in this type byte, and
> thereby require that the receiver read the signature before it goes back
> and hashes the data (or else hash the data both ways).
> 
> Are these the alternatives as you see them?
> 
> Hal

-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord@MIT.EDU                        PGP key available


From owner-ietf-openpgp@mail.imc.org  Tue Feb 13 16:53:34 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id QAA01077
	for <openpgp-archive@odin.ietf.org>; Tue, 13 Feb 2001 16:53:33 -0500 (EST)
Received: by above.proper.com (8.9.3/8.9.3) id NAA03293
	for ietf-openpgp-bks; Tue, 13 Feb 2001 13:20:48 -0800 (PST)
Received: from smtp2.nikoma.de (smtp2.nikoma.de [212.122.128.25])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id NAA03289
	for <ietf-openpgp@imc.org>; Tue, 13 Feb 2001 13:20:46 -0800 (PST)
Received: from sobolev.does-not-exist.org (dialin159.pg12-nt.frankfurt.nikoma.de [213.54.43.159])
	by smtp2.nikoma.de (8.9.3/8.9.3) with ESMTP id WAA65695;
	Tue, 13 Feb 2001 22:20:31 +0100 (CET)
	(envelope-from roessler@does-not-exist.org)
Received: by sobolev.does-not-exist.org (Postfix, from userid 1000)
	id 5E73F2ED15; Tue, 13 Feb 2001 22:08:10 +0100 (CET)
Date: Tue, 13 Feb 2001 22:08:09 +0100
From: Thomas Roessler <roessler@does-not-exist.org>
To: Derek Atkins <warlord@mit.edu>
Cc: hal@finney.org, ietf-openpgp@imc.org
Subject: Re: PGP/MIME implementors: text mode vs. binary mode?
Message-ID: <20010213220809.B24984@sobolev.does-not-exist.org>
Mail-Followup-To: Derek Atkins <warlord@MIT.EDU>, hal@finney.org,
	ietf-openpgp@imc.org
References: <200102131907.LAA02731@finney.org> <sjm4rxyl4rf.fsf@rcn.ihtfp.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.3.15i
In-Reply-To: <sjm4rxyl4rf.fsf@rcn.ihtfp.org>; from warlord@MIT.EDU on Tue, Feb 13, 2001 at 03:14:28PM -0500
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

On 2001-02-13 15:14:28 -0500, Derek Atkins wrote:

> 	a) specify a canonicalization and require binary sigs.
>	   Unfortunately this invalidates a number of
>	   implementations that currently use text sigs.

> 	b) specify a canonicalization that matches text and allow
>	   either binary or text sigs.  Unfortunately this has the
>	   problem that RFC1991 and RFC2440 have different ideas
>	   of what should be included in a text-mode signature.

> 	c) Change the PGP/MIME canonicalization requirements to
>	   match RFC2440 text-mode.  This has the effect that
>	   previous messages (and probably many implementations)
>	   wont be PGP/MIME compliant.

What precisely is the difference between b) and c) supposed to be? I
seem to be missing some point here.

Anyway: When text and binary mode hashes (as I'll call them by abuse
of language) calculated according to RFC 2440 conincide, the text
hash from RFC 1991 coincides, too.  Additionally, protecting
trailing white space by way of an appropriate encoding has been a
good idea in the past, and was suggested and demonstrated in one of
the example messages in RFC 2015.

For this reason, we may actually be in the lucky situation that
implementations already fulfill most of the stricter requirements
suggested.

Maybe some implementors can say a word about this?

(To contribute my own part, mutt should be fine with it, and I'm
certainly willing to fix any holes through which trailing whitespace
might creep.)

-- 
Thomas Roessler			    <roessler@does-not-exist.org>


From owner-ietf-openpgp@mail.imc.org  Tue Feb 13 17:04:35 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id RAA01320
	for <openpgp-archive@odin.ietf.org>; Tue, 13 Feb 2001 17:04:34 -0500 (EST)
Received: by above.proper.com (8.9.3/8.9.3) id NAA04799
	for ietf-openpgp-bks; Tue, 13 Feb 2001 13:48:45 -0800 (PST)
Received: from rcn.ihtfp.org (me@ORANGE-TOUR.IHTFP.ORG [204.107.200.33])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id NAA04792
	for <ietf-openpgp@imc.org>; Tue, 13 Feb 2001 13:48:42 -0800 (PST)
Received: (from warlord@localhost) by rcn.ihtfp.org (8.9.3)
	id QAA16891; Tue, 13 Feb 2001 16:48:35 -0500
To: Thomas Roessler <roessler@does-not-exist.org>
Cc: hal@finney.org, ietf-openpgp@imc.org
Subject: Re: PGP/MIME implementors: text mode vs. binary mode?
References: <200102131907.LAA02731@finney.org> <sjm4rxyl4rf.fsf@rcn.ihtfp.org> <20010213220809.B24984@sobolev.does-not-exist.org>
From: Derek Atkins <warlord@mit.edu>
Date: 13 Feb 2001 16:48:35 -0500
In-Reply-To: Thomas Roessler's message of "Tue, 13 Feb 2001 22:08:09 +0100"
Message-ID: <sjmwvaujlu4.fsf@rcn.ihtfp.org>
Lines: 32
X-Mailer: Gnus v5.5/Emacs 20.3
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

Thomas Roessler <roessler@does-not-exist.org> writes:

> On 2001-02-13 15:14:28 -0500, Derek Atkins wrote:
> 
> > 	a) specify a canonicalization and require binary sigs.
> >	   Unfortunately this invalidates a number of
> >	   implementations that currently use text sigs.
> 
> > 	b) specify a canonicalization that matches text and allow
> >	   either binary or text sigs.  Unfortunately this has the
> >	   problem that RFC1991 and RFC2440 have different ideas
> >	   of what should be included in a text-mode signature.
> 
> > 	c) Change the PGP/MIME canonicalization requirements to
> >	   match RFC2440 text-mode.  This has the effect that
> >	   previous messages (and probably many implementations)
> >	   wont be PGP/MIME compliant.
> 
> What precisely is the difference between b) and c) supposed to be? I
> seem to be missing some point here.

Sorry, the difference between b and c is that in b I implied that
PGP/MIME use the RFC1991 canonicalization scheme, whereas in c I imply
using the RFC2440 canonicalization scheme.  I'm sorry I wasn't more
clear.

-derek
-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord@MIT.EDU                        PGP key available


From owner-ietf-openpgp@mail.imc.org  Tue Feb 13 19:14:12 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id TAA03008
	for <openpgp-archive@odin.ietf.org>; Tue, 13 Feb 2001 19:14:11 -0500 (EST)
Received: by above.proper.com (8.9.3/8.9.3) id QAA14165
	for ietf-openpgp-bks; Tue, 13 Feb 2001 16:01:52 -0800 (PST)
Received: from finney.org (226-132.adsl2.netlojix.net [207.71.226.132])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id QAA14157
	for <ietf-openpgp@imc.org>; Tue, 13 Feb 2001 16:01:49 -0800 (PST)
From: hal@finney.org
Received: (from hal@localhost)
	by finney.org (8.9.3/8.9.3) id PAA03769;
	Tue, 13 Feb 2001 15:59:37 -0800
Date: Tue, 13 Feb 2001 15:59:37 -0800
Message-Id: <200102132359.PAA03769@finney.org>
To: roessler@does-not-exist.org, warlord@mit.edu
Subject: Re: PGP/MIME implementors: text mode vs. binary mode?
Cc: hal@finney.org, ietf-openpgp@imc.org
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

Isn't the real, operational issue here a question of whether trailing
white space should be hashed?  The choices are to say yes, or no, or it
depends on the type byte in the signature.

I can't help thinking that the distinction between text and binary mode
is not that useful in solving this problem.  Let's not get hung up on
the specification incompatibility between PGP 2.X and OpenPGP.

The real question is whether to hash trailing whitespace or not.  One way
to help decide this is to look at how existing implementations do it.

I can tell you that on message receipt, the commercial versions of PGP
from Network Associates DO hash trailing whitespace on PGP/MIME messages.
That is, they are sensitive to the presence of trailing whitespace and
it is included in the hash.  This is true regardless of whether the
signature type byte is text or binary mode.  That may or may not be
compatible with the spec but that is how these versions work.

Hal


From owner-ietf-openpgp@mail.imc.org  Wed Feb 14 04:00:04 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id EAA25092
	for <openpgp-archive@odin.ietf.org>; Wed, 14 Feb 2001 04:00:03 -0500 (EST)
Received: by above.proper.com (8.9.3/8.9.3) id AAA15054
	for ietf-openpgp-bks; Wed, 14 Feb 2001 00:30:39 -0800 (PST)
Received: from smtp1.nikoma.de (smtp1.nikoma.de [212.122.128.19])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id AAA15036
	for <ietf-openpgp@imc.org>; Wed, 14 Feb 2001 00:30:37 -0800 (PST)
Received: from sobolev.does-not-exist.org (dialin222.pg5-nt.frankfurt.nikoma.de [213.54.36.222])
	by smtp1.nikoma.de (8.9.3/8.9.3) with ESMTP id JAA89142;
	Wed, 14 Feb 2001 09:30:30 +0100 (CET)
	(envelope-from roessler@does-not-exist.org)
Received: by sobolev.does-not-exist.org (Postfix, from userid 1000)
	id ACE822ED19; Wed, 14 Feb 2001 09:29:30 +0100 (CET)
Date: Wed, 14 Feb 2001 09:29:30 +0100
From: Thomas Roessler <roessler@does-not-exist.org>
To: hal@finney.org
Cc: warlord@mit.edu, ietf-openpgp@imc.org
Subject: Re: PGP/MIME implementors: text mode vs. binary mode?
Message-ID: <20010214092930.E32336@sobolev.does-not-exist.org>
Mail-Followup-To: hal@finney.org, warlord@MIT.EDU, ietf-openpgp@imc.org
References: <200102132359.PAA03769@finney.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.3.15i
In-Reply-To: <200102132359.PAA03769@finney.org>; from hal@finney.org on Tue, Feb 13, 2001 at 03:59:37PM -0800
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

On 2001-02-13 15:59:37 -0800, hal@finney.org wrote:

> Isn't the real, operational issue here a question of whether
> trailing white space should be hashed?  The choices are to say
> yes, or no, or it depends on the type byte in the signature.

> I can't help thinking that the distinction between text and
> binary mode is not that useful in solving this problem.  Let's
> not get hung up on the specification incompatibility between PGP
> 2.X and OpenPGP.

> The real question is whether to hash trailing whitespace or not.
> One way to help decide this is to look at how existing
> implementations do it.

Maybe.  With mutt, it currently depends on the PGP back-end used,
which is invoked as an external program.  However, we don't have
lots of problems with trailing whitespace in practice, because it's
avoided unless someone sets a certain shoot-yourself-into-the-foot
option.

> I can tell you that on message receipt, the commercial versions
> of PGP from Network Associates DO hash trailing whitespace on
> PGP/MIME messages. That is, they are sensitive to the presence of
> trailing whitespace and it is included in the hash.  This is true
> regardless of whether the signature type byte is text or binary
> mode.  That may or may not be compatible with the spec but that
> is how these versions work.

This means that you are interoperable with anyone else using pgp2 or
pgp5 as the back-end, but it also means that you are not
interoperable with people using pgp6 or gnupg as their back-ends, as
soon as trailing whitespace is involved.

To make things more interesting, people won't be able to just
decompose a PGP/MIME message and verify the signature as a "detached
signature" like they should be able to do - at least not if they use
the same version of PGP which verifies the signature nicely in their
MUA.

Oh well...


Since interoperability is an illusion anyway with respect to t.w.,
and things seem to work despite this, we should most likely really
just say that implementations MUST NOT feed any t.w. to the signer.

(Note that, in this case, your PGP/MIME code would just notice when
tw is added to a message, regardless of the signature type used.
It's really just a restriction on the sending end to help different
verifiers to produce consistent results.)

-- 
Thomas Roessler			    <roessler@does-not-exist.org>


From owner-ietf-openpgp@mail.imc.org  Wed Feb 14 07:52:33 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id HAA26860
	for <openpgp-archive@odin.ietf.org>; Wed, 14 Feb 2001 07:52:32 -0500 (EST)
Received: by above.proper.com (8.9.3/8.9.3) id EAA09903
	for ietf-openpgp-bks; Wed, 14 Feb 2001 04:34:02 -0800 (PST)
Received: from internal.mail.demon.net (internal.mail.demon.net [193.195.224.3])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id EAA09895
	for <ietf-openpgp@imc.org>; Wed, 14 Feb 2001 04:33:59 -0800 (PST)
Received: from pillar.turnpike.com (pillar.turnpike.com [194.70.55.2])
	by internal.mail.demon.net with ESMTP id MAA22081;
	Wed, 14 Feb 2001 12:33:52 GMT
Message-ID: <tMoKFvB9qni6IAcQ@turnpike.com>
Date: Wed, 14 Feb 2001 12:31:57 +0000
To: ietf-openpgp@imc.org
From: Ian Bell <ianbell@turnpike.com>
Subject: Re: PGP 7.0 and PGP/MIME?
References: <20010213122610.D5652@sobolev.does-not-exist.org>
 <200102131401.JAA26581@citicom.com>
In-Reply-To: <200102131401.JAA26581@citicom.com>
MIME-Version: 1.0
X-Mailer: Turnpike Integrated Version 5.01 M <U2yaxlNz9mbtXQDcM+J3SutElj>
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

On Tue, 13 Feb 2001, Damon Gallaty <dgal@citicom.com> wrote:

>Before anyone asks, I'll answer the question: why don't all of NAI's PGP
>plug-ins recognize PGP/MIME? The answer is that, in order to recognize
>PGP/MIME, you must have access to the MIME headers, obviously.
>Unfortunately, not all of the MUA's allow plug-ins to access the MIME
>headers, thus there is no pratical way to parse or create PGP/MIME for
>those MUA's. Outlook and Outlook Express are two examples of this.

I think it should be possible to make Outlook verify PGP/MIME signed
messages, which would be a start.

Because of the need to support S/MIME, I have been told that Outlook
holds the entire RFC822 message in its raw form as well as in
proprietary MAPI form. I believe that there is a MAPI tag to get the raw
multipart/signed data.

-- 
Ian Bell                                           T U R N P I K E


From owner-ietf-openpgp@mail.imc.org  Thu Feb 15 06:33:08 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id GAA12631
	for <openpgp-archive@odin.ietf.org>; Thu, 15 Feb 2001 06:33:08 -0500 (EST)
Received: by above.proper.com (8.9.3/8.9.3) id DAA19525
	for ietf-openpgp-bks; Thu, 15 Feb 2001 03:14:13 -0800 (PST)
Received: from mercury.rus.uni-stuttgart.de (mercury.rus.uni-stuttgart.de [129.69.1.226])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id DAA19517
	for <ietf-openpgp@imc.org>; Thu, 15 Feb 2001 03:14:11 -0800 (PST)
Received: from rusfw by mercury.rus.uni-stuttgart.de with local (Exim 3.12 #4)
	id 14TMEZ-0002zn-00
	for ietf-openpgp@imc.org; Thu, 15 Feb 2001 12:05:59 +0100
To: ietf-openpgp@imc.org
Subject: Re: PGP/MIME implementors: text mode vs. binary mode?
References: <200102131907.LAA02731@finney.org>
	<20010213205155.M16820@sobolev.does-not-exist.org>
From: Florian Weimer <Florian.Weimer@RUS.Uni-Stuttgart.DE>
Date: 15 Feb 2001 12:05:59 +0100
In-Reply-To: <20010213205155.M16820@sobolev.does-not-exist.org>
Message-ID: <tgwvascijs.fsf@mercury.rus.uni-stuttgart.de>
Lines: 18
User-Agent: Gnus/5.0808 (Gnus v5.8.8) Emacs/20.7
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

Thomas Roessler <roessler@does-not-exist.org> writes:

> > The signature block at the bottom of the PGP/MIME signed message
> > has a signature type byte in it, text vs binary.  Is it your
> > assumption that the value in this type byte should control the
> > hashing of the textual data which is earlier in the message?
> 
> Yes, of course.

And thus breaking one-pass-processing, one of the fundamental design
goals of MIME? ;-)

You have to put this information into the micalg parameter, I think.

-- 
Florian Weimer 	                  Florian.Weimer@RUS.Uni-Stuttgart.DE
University of Stuttgart           http://cert.uni-stuttgart.de/
RUS-CERT                          +49-711-685-5973/fax +49-711-685-5898


From owner-ietf-openpgp@mail.imc.org  Thu Feb 15 07:57:21 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id HAA14187
	for <openpgp-archive@odin.ietf.org>; Thu, 15 Feb 2001 07:57:21 -0500 (EST)
Received: by above.proper.com (8.9.3/8.9.3) id EAA25062
	for ietf-openpgp-bks; Thu, 15 Feb 2001 04:28:35 -0800 (PST)
Received: from kasiski.gnupg.de (porta.u64.de [194.77.88.106])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id EAA25056
	for <ietf-openpgp@imc.org>; Thu, 15 Feb 2001 04:28:32 -0800 (PST)
Received: from uucp by kasiski.gnupg.de with local-rmail (Exim 3.16 #1 (Debian))
	id 14TNjY-0000nO-00; Thu, 15 Feb 2001 13:42:04 +0100
Received: from wk by alberti.gnupg.de with local (Exim 3.12 #1 (Debian))
	id 14TNYV-0005GF-00; Thu, 15 Feb 2001 13:30:39 +0100
Date: Thu, 15 Feb 2001 13:30:39 +0100
From: Werner Koch <wk@gnupg.org>
To: ietf-openpgp@imc.org
Subject: Re: PGP/MIME implementors: text mode vs. binary mode?
Message-ID: <20010215133039.T19392@alberti.gnupg.de>
Mail-Followup-To: ietf-openpgp@imc.org
References: <200102131907.LAA02731@finney.org> <20010213205155.M16820@sobolev.does-not-exist.org> <tgwvascijs.fsf@mercury.rus.uni-stuttgart.de>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <tgwvascijs.fsf@mercury.rus.uni-stuttgart.de>; from Florian.Weimer@RUS.Uni-Stuttgart.DE on Thu, Feb 15, 2001 at 12:05:59PM +0100
X-PGP-KeyID: 621CC013
X-PGP-CertKey: A4D9 4E92 B098 6AB5 EE9D  CD75 5DE2 4996 5B03 58A2
X-Request-PGP: finger:wk@porta.u64.de
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

On Thu, 15 Feb 2001, Florian Weimer wrote:

> And thus breaking one-pass-processing, one of the fundamental design
> goals of MIME? ;-)

It won't work anyway:

|   The "micalg" parameter for the "application/pgp-signature" protocol
|   MUST contain exactly one hash-symbol of the format "pgp-<hash-
                 ^^^^^^^^^^^
This does not allow to have more than 1 signature in the second part
with different hash algorithms.  I know that this is addressed in
the multisig draft but it would be nice to have 2 signatures in this
protocol.

So why shouldn't we allow a wildcard or a list.  The only drawback
is that one has to apply multiple hash algorithms and select later
which to use.


-- 
Werner Koch                                              <wk@gnupg.org>
GNU Privacy Guard                                (http://www.gnupg.org)
Free Software Foundation Europe              (http://www.fsfeurope.org)
           [Please see X-* mail header for OpenPGP key info]



From owner-ietf-openpgp@mail.imc.org  Thu Feb 15 12:51:24 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id MAA25399
	for <openpgp-archive@odin.ietf.org>; Thu, 15 Feb 2001 12:51:23 -0500 (EST)
Received: by above.proper.com (8.9.3/8.9.3) id JAA13099
	for ietf-openpgp-bks; Thu, 15 Feb 2001 09:23:41 -0800 (PST)
Received: from smtp2.nikoma.de (smtp2.nikoma.de [212.122.128.25])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id JAA13093
	for <ietf-openpgp@imc.org>; Thu, 15 Feb 2001 09:23:39 -0800 (PST)
Received: from sobolev.does-not-exist.org (dialin209.pg10-nt.frankfurt.nikoma.de [213.54.41.209])
	by smtp2.nikoma.de (8.9.3/8.9.3) with ESMTP id SAA09417
	for <ietf-openpgp@imc.org>; Thu, 15 Feb 2001 18:23:28 +0100 (CET)
	(envelope-from roessler@does-not-exist.org)
Received: by sobolev.does-not-exist.org (Postfix, from userid 1000)
	id 143CC2ED19; Thu, 15 Feb 2001 18:23:21 +0100 (CET)
Date: Thu, 15 Feb 2001 18:23:21 +0100
From: Thomas Roessler <roessler@does-not-exist.org>
To: ietf-openpgp@imc.org
Subject: Re: PGP/MIME implementors: text mode vs. binary mode?
Message-ID: <20010215182320.A27797@sobolev.does-not-exist.org>
Mail-Followup-To: ietf-openpgp@imc.org
References: <200102131907.LAA02731@finney.org> <20010213205155.M16820@sobolev.does-not-exist.org> <tgwvascijs.fsf@mercury.rus.uni-stuttgart.de>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.3.15i
In-Reply-To: <tgwvascijs.fsf@mercury.rus.uni-stuttgart.de>; from Florian.Weimer@RUS.Uni-Stuttgart.DE on Thu, Feb 15, 2001 at 12:05:59PM +0100
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

On 2001-02-15 12:05:59 +0100, Florian Weimer wrote:

>>> The signature block at the bottom of the PGP/MIME signed
>>> message has a signature type byte in it, text vs binary.  Is
>>> it your assumption that the value in this type byte should
>>> control the hashing of the textual data which is earlier in
>>> the message?

>> Yes, of course.

> And thus breaking one-pass-processing, one of the fundamental
> design goals of MIME? ;-)

Not really. ,-)

> You have to put this information into the micalg parameter, I
> think.

By mandating that the two hashes coincide on all allowed data, we
can circumvent this.

-- 
Thomas Roessler			    <roessler@does-not-exist.org>


From owner-ietf-openpgp@mail.imc.org  Mon Feb 19 12:30:11 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id MAA09825
	for <openpgp-archive@odin.ietf.org>; Mon, 19 Feb 2001 12:30:10 -0500 (EST)
Received: (from majordomo@localhost)
	by above.proper.com (8.9.3/8.9.3) id JAA11470
	for ietf-openpgp-bks; Mon, 19 Feb 2001 09:05:30 -0800 (PST)
Received: from mail.imc.org ([211.219.97.33])
	by above.proper.com (8.9.3/8.9.3) with SMTP id JAA11458
	for <ietf-openpgp@imc.org>; Mon, 19 Feb 2001 09:05:28 -0800 (PST)
Message-Id: <200102191705.JAA11458@above.proper.com>
From: Asian.Postcard@above.proper.com
Date: Tue, 20 Feb 2001 02:05:08
X-Mailer: Prospect Mailer 2000
To: ietf-openpgp@imc.org
Subject: You can send actual postcard from asia
MIME-Version: 1.0
Content-Type: text/plain;charset="iso-8859-1"
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>
X-MIME-Autoconverted: from 8bit to quoted-printable by above.proper.com id JAA11470
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by ietf.org id MAA09825

If you received an actual postcard from abroad¡¦.
How do you feel ?
 

We send it from Seoul Korea to your client in worldwide with a Korea stamp and oriental postcard with your handwritten messages.

Your customer will think you are sending it from Korea with traveling, even if you are not there.

a)	customer's interest - say hello from the mystery world.
b)	customer's inspiration - your special concerns from abroad.
c)	unique experience - receiving news from the opposite side of the earth.
d)	hand-written message - think of them as a valued customer

For most companies it means the difference between a sizeable profit margin and just getting by. A successful business requires good communication between the company and the client and the company showing that it cares about its clients.

With our personalized postcards you have the opportunity to show that you care about the people who make your business profitable.
Many companies have greeting cards that can be received electronically. Our company is not one of those. Even though we realize that we are in the electronic age we relate to how important an 'actual' postcard received at their home or office can be. Our postcards served handwritten so that they can be personable. These messages will relate that you care about their business and think of them as a valued customer.

So why wait any longer to let your customers know how you feel about them 
Visit our website today at http://www.asiancard.com to let them know how important they are to you.

Sincerely 

Jaeson Joe
Asian postcard service  
postman@asiancard.com



From owner-ietf-openpgp@mail.imc.org  Wed Feb 21 23:12:32 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id XAA19870
	for <openpgp-archive@odin.ietf.org>; Wed, 21 Feb 2001 23:12:32 -0500 (EST)
Received: by above.proper.com (8.9.3/8.9.3) id TAA16504
	for ietf-openpgp-bks; Wed, 21 Feb 2001 19:54:35 -0800 (PST)
Received: from dns1.hachiuma.co.jp (root@dns1.hachiuma.co.jp [210.142.10.10])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id TAA16500
	for <ietf-openpgp@imc.org>; Wed, 21 Feb 2001 19:54:32 -0800 (PST)
From: did342@arabia.com
Received: from minet.marriott.com (1Cust142.tnt12.dfw5.da.uu.net [63.44.237.142])
	by dns1.hachiuma.co.jp (8.9.0/3.7W) with SMTP id MAA23878;
	Thu, 22 Feb 2001 12:59:05 +0900
Message-ID: <0000518a320a$0000726f$00006d11@mailhost.ggtech.com>
To: <7zmwfu25pfyocxe7@accessnova.cl>
Subject: Brand New Motorola Email Pager FR-EE 
Date: Wed, 21 Feb 2001 21:52:48 -0600
MIME-Version: 1.0
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Priority: 3
X-MSMail-Priority: Normal
Reply-To: did342@arabia.com
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>
Content-Transfer-Encoding: quoted-printable

<HTML>
<BODY>

<FONT face=3D"MS Sans Serif">
<FONT size=3D2>
<FONT color=3D"#000000"> We are a professional commercial e-mail service t=
hat has been in business for over 6 years. We can help you reach more pote=
ntial customers through e-mail. No doubt you've heard every horror story<B=
R>
about UCE, but frankly it's not true. There is a very small element that d=
oes not want the Internet to be used for commercial purposes, but isn't th=
at what the Internet really is? And it is completely legal to send commerc=
ial e-mail. <BR>
<BR>
There is Target and Bulk Email. We can send either for you! We've mailed f=
or hundreds of companies over the last 6 years, and many of them you would=
 recognize. <BR>
<BR>
     Here are some of the advantages: <BR>
     * No Printing Cost! No Handling (stuffing envelops)! <BR>
     * No Postage! <BR>
     * Cost Effective Too!<BR>
     100 thousand  $200<BR>
     500 thousand  $875<BR>
     1 million           $1500<BR>
     * We do all the mailing, you have no hassle! <BR>
<BR>
We will assist you in the preparation of your e-mail letter! <BR>
Ask us for our Special Introduction Price when you phone. We will show you=
 that e-mailing works! <BR>
<BR>
For complete details, phone (888) 829-1943 <BR>
<BR>
</FONT></FONT><p><p><p><p><p><p><p><p><p><p>








<p><FONT face=3D"MS Sans Serif"><p><p><p><p><p><p><p></BODY></HTML>




From owner-ietf-openpgp@mail.imc.org  Mon Feb 26 14:52:35 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id OAA24173
	for <openpgp-archive@odin.ietf.org>; Mon, 26 Feb 2001 14:52:35 -0500 (EST)
Received: by above.proper.com (8.9.3/8.9.3) id LAA04209
	for ietf-openpgp-bks; Mon, 26 Feb 2001 11:32:30 -0800 (PST)
Received: from mage.qualcomm.com (mage.qualcomm.com [129.46.65.64])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id LAA04203
	for <ietf-openpgp@imc.org>; Mon, 26 Feb 2001 11:32:29 -0800 (PST)
Received: from [199.106.117.178] (vpnap-g1-012068.qualcomm.com [10.13.12.68])
	by mage.qualcomm.com (8.11.2/8.11.2/1.0) with ESMTP id f1QJWTu18052
	for <ietf-openpgp@imc.org>; Mon, 26 Feb 2001 11:32:29 -0800 (PST)
Mime-Version: 1.0
X-Sender: jwn2@mage.qualcomm.com (Unverified)
Message-Id: <a05100100b6c05c88332f@[199.106.117.178]>
In-Reply-To: <20010212120440.E1539@alberti.gnupg.de>
References: <20010125135932.L15272@alberti.gnupg.de>
 <tgae7vbtyb.fsf@mercury.rus.uni-stuttgart.de>
 <20010212105012.A27199@sobolev.does-not-exist.org>
 <20010212.191247.74718089.kazu@iijlab.net>
 <20010212120440.E1539@alberti.gnupg.de>
X-Mailer: Eudora [Macintosh version 5.1-022301]
X-PGP-RSA-Fingerprint: EA53 01A6 C076 F9C2  09E8 9480 645A 8857
X-PGP-DH-Fingerprint: 4F5E 56C9 BD4D 0227 331F 6AEE 9590 24F9 6FD7 04F8
Date: Mon, 26 Feb 2001 11:30:28 -0800
To: ietf-openpgp@imc.org
From: John  W Noerenberg II <jwn2@qualcomm.com>
Subject: Re: Finalizing OpenPGP/MIME? - Mtg in Mpls
Content-Type: text/plain; charset="us-ascii" ; format="flowed"
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

I'm gonna schedule an hour in Minneapolis for OpenPGP.  Main thing on 
the list is to deal with PGP/MIME.  If not enough of us are going to 
show, I'll cancel.  But let's get on the agenda.

I also want to talk about openPGP implementation interoperability 
verification.  I haven't decided if Phil's proposed PGP Consortium 
should be a topic, but it probably out of scope.

If there are other things we should talk about please let me know. 
I'll put the agenda together over the next week or so.
-- 

john noerenberg
jwn2@qualcomm.com
   --------------------------------------------------------------------------
   Peace of mind isn't at all superficial, really.  It's the whole thing.
   That which produces it is good maintenance; that which disturbs it
   is poor maintenance.
   -- Zen and the Art of Motorcycle Maintenance, Robert M. Pirsig, 1974
   --------------------------------------------------------------------------


From owner-ietf-openpgp@mail.imc.org  Tue Feb 27 03:57:03 2001
Received: from above.proper.com (above.proper.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id DAA01886
	for <openpgp-archive@odin.ietf.org>; Tue, 27 Feb 2001 03:57:02 -0500 (EST)
Received: by above.proper.com (8.9.3/8.9.3) id AAA19978
	for ietf-openpgp-bks; Tue, 27 Feb 2001 00:42:51 -0800 (PST)
Received: from tcp.ip.lu (tcp.ip.lu [208.161.252.3])
	by above.proper.com (8.9.3/8.9.3) with ESMTP id AAA19973
	for <ietf-openpgp@imc.org>; Tue, 27 Feb 2001 00:42:48 -0800 (PST)
Received: from bohr.does-not-exist.org (dialup06.ip.lu [208.161.253.6])
	by tcp.ip.lu (8.9.3/8.9.3) with ESMTP id JAA26553
	for <ietf-openpgp@imc.org>; Tue, 27 Feb 2001 09:42:16 +0100 (CET)
Received: from sobolev.does-not-exist.org (sobolev.does-not-exist.org [192.168.2.1])
	by bohr.does-not-exist.org (Postfix) with ESMTP id 42F4D12EA1
	for <ietf-openpgp@imc.org>; Tue, 27 Feb 2001 09:42:18 +0100 (CET)
Received: by sobolev.does-not-exist.org (Postfix, from userid 1000)
	id 7728B2ED15; Tue, 27 Feb 2001 09:41:43 +0100 (CET)
Date: Tue, 27 Feb 2001 09:41:43 +0100
From: Thomas Roessler <roessler@does-not-exist.org>
To: ietf-openpgp@imc.org
Subject: draft-ietf-openpgp-mime-05.txt pending.
Message-ID: <20010227094143.A3312@sobolev.does-not-exist.org>
Mail-Followup-To: ietf-openpgp@imc.org
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
	protocol="application/pgp-signature"; boundary="ZGiS0Q5IWpPtfppv"
Content-Disposition: inline
User-Agent: Mutt/1.3.15i
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>


--ZGiS0Q5IWpPtfppv
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

I have just submitted another ID for OpenPGP/MIME.  It implements
the latest suggestion re text/binary mode signatures, and trailing
white space.  Namely, it strictly prohibits trailing whitespace and
leaves the question of the signature mode open. =20

This approach should achieve a maximum of interoperability between
the various implementations of the standard.  Also, all
implementations would still conform to RFC 2015.

--=20
Thomas Roessler			    <roessler@does-not-exist.org>
This message may  have been certified to  be possibly virus-free.

--ZGiS0Q5IWpPtfppv
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3in

iQEVAwUBOptoR9ImKUTOasbBAQF6NggAigB5RrWBgePH6dG5rGLA+lOLpGwyFvwr
+tflMSMt0BvrSAbDPC18yUcPB3/zHSOoOdOoSz7taBO5dwia82W+Y77FEOYyAzik
mA46EG529eZwYBNdNXPhp7SigO8aHD8BW/o8evhyP6OqoMzPJsgiJaZLOLlz2o6I
Q4c/G+9Bmgs9YsS8+c/Rb+sD7ij3QgTkSdzphvz90+ehxtb1he6tQDBeFiOpozCb
2L1MltiY+xncR+8g21LdrLK9pDZJLFQ7++Ka5kZ8OMBjaUhafTU8Fq+kxqrL0B/g
taFYzLKHYIsPWhL3SGnTGj2Lop5qeram7JMEYku1Cdti5LMhr+dWBw==
=i+Qd
-----END PGP SIGNATURE-----

--ZGiS0Q5IWpPtfppv--



Received: by above.proper.com (8.9.3/8.9.3) id AAA19978 for ietf-openpgp-bks; Tue, 27 Feb 2001 00:42:51 -0800 (PST)
Received: from tcp.ip.lu (tcp.ip.lu [208.161.252.3]) by above.proper.com (8.9.3/8.9.3) with ESMTP id AAA19973 for <ietf-openpgp@imc.org>; Tue, 27 Feb 2001 00:42:48 -0800 (PST)
Received: from bohr.does-not-exist.org (dialup06.ip.lu [208.161.253.6]) by tcp.ip.lu (8.9.3/8.9.3) with ESMTP id JAA26553 for <ietf-openpgp@imc.org>; Tue, 27 Feb 2001 09:42:16 +0100 (CET)
Received: from sobolev.does-not-exist.org (sobolev.does-not-exist.org [192.168.2.1]) by bohr.does-not-exist.org (Postfix) with ESMTP id 42F4D12EA1 for <ietf-openpgp@imc.org>; Tue, 27 Feb 2001 09:42:18 +0100 (CET)
Received: by sobolev.does-not-exist.org (Postfix, from userid 1000) id 7728B2ED15; Tue, 27 Feb 2001 09:41:43 +0100 (CET)
Date: Tue, 27 Feb 2001 09:41:43 +0100
From: Thomas Roessler <roessler@does-not-exist.org>
To: ietf-openpgp@imc.org
Subject: draft-ietf-openpgp-mime-05.txt pending.
Message-ID: <20010227094143.A3312@sobolev.does-not-exist.org>
Mail-Followup-To: ietf-openpgp@imc.org
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="ZGiS0Q5IWpPtfppv"
Content-Disposition: inline
User-Agent: Mutt/1.3.15i
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

--ZGiS0Q5IWpPtfppv
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

I have just submitted another ID for OpenPGP/MIME.  It implements
the latest suggestion re text/binary mode signatures, and trailing
white space.  Namely, it strictly prohibits trailing whitespace and
leaves the question of the signature mode open. =20

This approach should achieve a maximum of interoperability between
the various implementations of the standard.  Also, all
implementations would still conform to RFC 2015.

--=20
Thomas Roessler			    <roessler@does-not-exist.org>
This message may  have been certified to  be possibly virus-free.

--ZGiS0Q5IWpPtfppv
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3in

iQEVAwUBOptoR9ImKUTOasbBAQF6NggAigB5RrWBgePH6dG5rGLA+lOLpGwyFvwr
+tflMSMt0BvrSAbDPC18yUcPB3/zHSOoOdOoSz7taBO5dwia82W+Y77FEOYyAzik
mA46EG529eZwYBNdNXPhp7SigO8aHD8BW/o8evhyP6OqoMzPJsgiJaZLOLlz2o6I
Q4c/G+9Bmgs9YsS8+c/Rb+sD7ij3QgTkSdzphvz90+ehxtb1he6tQDBeFiOpozCb
2L1MltiY+xncR+8g21LdrLK9pDZJLFQ7++Ka5kZ8OMBjaUhafTU8Fq+kxqrL0B/g
taFYzLKHYIsPWhL3SGnTGj2Lop5qeram7JMEYku1Cdti5LMhr+dWBw==
=i+Qd
-----END PGP SIGNATURE-----

--ZGiS0Q5IWpPtfppv--


Received: by above.proper.com (8.9.3/8.9.3) id LAA04209 for ietf-openpgp-bks; Mon, 26 Feb 2001 11:32:30 -0800 (PST)
Received: from mage.qualcomm.com (mage.qualcomm.com [129.46.65.64]) by above.proper.com (8.9.3/8.9.3) with ESMTP id LAA04203 for <ietf-openpgp@imc.org>; Mon, 26 Feb 2001 11:32:29 -0800 (PST)
Received: from [199.106.117.178] (vpnap-g1-012068.qualcomm.com [10.13.12.68]) by mage.qualcomm.com (8.11.2/8.11.2/1.0) with ESMTP id f1QJWTu18052 for <ietf-openpgp@imc.org>; Mon, 26 Feb 2001 11:32:29 -0800 (PST)
Mime-Version: 1.0
X-Sender: jwn2@mage.qualcomm.com (Unverified)
Message-Id: <a05100100b6c05c88332f@[199.106.117.178]>
In-Reply-To: <20010212120440.E1539@alberti.gnupg.de>
References: <20010125135932.L15272@alberti.gnupg.de> <tgae7vbtyb.fsf@mercury.rus.uni-stuttgart.de> <20010212105012.A27199@sobolev.does-not-exist.org> <20010212.191247.74718089.kazu@iijlab.net> <20010212120440.E1539@alberti.gnupg.de>
X-Mailer: Eudora [Macintosh version 5.1-022301]
X-PGP-RSA-Fingerprint: EA53 01A6 C076 F9C2  09E8 9480 645A 8857
X-PGP-DH-Fingerprint: 4F5E 56C9 BD4D 0227 331F 6AEE 9590 24F9 6FD7 04F8
Date: Mon, 26 Feb 2001 11:30:28 -0800
To: ietf-openpgp@imc.org
From: John  W Noerenberg II <jwn2@qualcomm.com>
Subject: Re: Finalizing OpenPGP/MIME? - Mtg in Mpls
Content-Type: text/plain; charset="us-ascii" ; format="flowed"
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

I'm gonna schedule an hour in Minneapolis for OpenPGP.  Main thing on 
the list is to deal with PGP/MIME.  If not enough of us are going to 
show, I'll cancel.  But let's get on the agenda.

I also want to talk about openPGP implementation interoperability 
verification.  I haven't decided if Phil's proposed PGP Consortium 
should be a topic, but it probably out of scope.

If there are other things we should talk about please let me know. 
I'll put the agenda together over the next week or so.
-- 

john noerenberg
jwn2@qualcomm.com
   --------------------------------------------------------------------------
   Peace of mind isn't at all superficial, really.  It's the whole thing.
   That which produces it is good maintenance; that which disturbs it
   is poor maintenance.
   -- Zen and the Art of Motorcycle Maintenance, Robert M. Pirsig, 1974
   --------------------------------------------------------------------------


Received: by above.proper.com (8.9.3/8.9.3) id TAA16504 for ietf-openpgp-bks; Wed, 21 Feb 2001 19:54:35 -0800 (PST)
Received: from dns1.hachiuma.co.jp (root@dns1.hachiuma.co.jp [210.142.10.10]) by above.proper.com (8.9.3/8.9.3) with ESMTP id TAA16500 for <ietf-openpgp@imc.org>; Wed, 21 Feb 2001 19:54:32 -0800 (PST)
From: did342@arabia.com
Received: from minet.marriott.com (1Cust142.tnt12.dfw5.da.uu.net [63.44.237.142]) by dns1.hachiuma.co.jp (8.9.0/3.7W) with SMTP id MAA23878; Thu, 22 Feb 2001 12:59:05 +0900
Message-ID: <0000518a320a$0000726f$00006d11@mailhost.ggtech.com>
To: <7zmwfu25pfyocxe7@accessnova.cl>
Subject: Brand New Motorola Email Pager FR-EE 
Date: Wed, 21 Feb 2001 21:52:48 -0600
MIME-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Priority: 3
X-MSMail-Priority: Normal
Reply-To: did342@arabia.com
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

<HTML>
<BODY>

<FONT face=3D"MS Sans Serif">
<FONT size=3D2>
<FONT color=3D"#000000"> We are a professional commercial e-mail service t=
hat has been in business for over 6 years. We can help you reach more pote=
ntial customers through e-mail. No doubt you've heard every horror story<B=
R>
about UCE, but frankly it's not true. There is a very small element that d=
oes not want the Internet to be used for commercial purposes, but isn't th=
at what the Internet really is? And it is completely legal to send commerc=
ial e-mail. <BR>
<BR>
There is Target and Bulk Email. We can send either for you! We've mailed f=
or hundreds of companies over the last 6 years, and many of them you would=
 recognize. <BR>
<BR>
     Here are some of the advantages: <BR>
     * No Printing Cost! No Handling (stuffing envelops)! <BR>
     * No Postage! <BR>
     * Cost Effective Too!<BR>
     100 thousand  $200<BR>
     500 thousand  $875<BR>
     1 million           $1500<BR>
     * We do all the mailing, you have no hassle! <BR>
<BR>
We will assist you in the preparation of your e-mail letter! <BR>
Ask us for our Special Introduction Price when you phone. We will show you=
 that e-mailing works! <BR>
<BR>
For complete details, phone (888) 829-1943 <BR>
<BR>
</FONT></FONT><p><p><p><p><p><p><p><p><p><p>








<p><FONT face=3D"MS Sans Serif"><p><p><p><p><p><p><p></BODY></HTML>




Received: (from majordomo@localhost) by above.proper.com (8.9.3/8.9.3) id JAA11470 for ietf-openpgp-bks; Mon, 19 Feb 2001 09:05:30 -0800 (PST)
Received: from mail.imc.org ([211.219.97.33]) by above.proper.com (8.9.3/8.9.3) with SMTP id JAA11458 for <ietf-openpgp@imc.org>; Mon, 19 Feb 2001 09:05:28 -0800 (PST)
Message-Id: <200102191705.JAA11458@above.proper.com>
From: Asian.Postcard
Date: Tue, 20 Feb 2001 02:05:08
X-Mailer: Prospect Mailer 2000
To: ietf-openpgp@imc.org
Subject: You can send actual postcard from asia
MIME-Version: 1.0
Content-Type: text/plain;charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

If you received an actual postcard from abroad¡¦.
How do you feel ?
 

We send it from Seoul Korea to your client in worldwide with a Korea stamp and oriental postcard with your handwritten messages.

Your customer will think you are sending it from Korea with traveling, even if you are not there.

a)	customer's interest - say hello from the mystery world.
b)	customer's inspiration - your special concerns from abroad.
c)	unique experience - receiving news from the opposite side of the earth.
d)	hand-written message - think of them as a valued customer

For most companies it means the difference between a sizeable profit margin and just getting by. A successful business requires good communication between the company and the client and the company showing that it cares about its clients.

With our personalized postcards you have the opportunity to show that you care about the people who make your business profitable.
Many companies have greeting cards that can be received electronically. Our company is not one of those. Even though we realize that we are in the electronic age we relate to how important an 'actual' postcard received at their home or office can be. Our postcards served handwritten so that they can be personable. These messages will relate that you care about their business and think of them as a valued customer.

So why wait any longer to let your customers know how you feel about them 
Visit our website today at http://www.asiancard.com to let them know how important they are to you.

Sincerely 

Jaeson Joe
Asian postcard service  
postman@asiancard.com



Received: by above.proper.com (8.9.3/8.9.3) id JAA13099 for ietf-openpgp-bks; Thu, 15 Feb 2001 09:23:41 -0800 (PST)
Received: from smtp2.nikoma.de (smtp2.nikoma.de [212.122.128.25]) by above.proper.com (8.9.3/8.9.3) with ESMTP id JAA13093 for <ietf-openpgp@imc.org>; Thu, 15 Feb 2001 09:23:39 -0800 (PST)
Received: from sobolev.does-not-exist.org (dialin209.pg10-nt.frankfurt.nikoma.de [213.54.41.209]) by smtp2.nikoma.de (8.9.3/8.9.3) with ESMTP id SAA09417 for <ietf-openpgp@imc.org>; Thu, 15 Feb 2001 18:23:28 +0100 (CET) (envelope-from roessler@does-not-exist.org)
Received: by sobolev.does-not-exist.org (Postfix, from userid 1000) id 143CC2ED19; Thu, 15 Feb 2001 18:23:21 +0100 (CET)
Date: Thu, 15 Feb 2001 18:23:21 +0100
From: Thomas Roessler <roessler@does-not-exist.org>
To: ietf-openpgp@imc.org
Subject: Re: PGP/MIME implementors: text mode vs. binary mode?
Message-ID: <20010215182320.A27797@sobolev.does-not-exist.org>
Mail-Followup-To: ietf-openpgp@imc.org
References: <200102131907.LAA02731@finney.org> <20010213205155.M16820@sobolev.does-not-exist.org> <tgwvascijs.fsf@mercury.rus.uni-stuttgart.de>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.3.15i
In-Reply-To: <tgwvascijs.fsf@mercury.rus.uni-stuttgart.de>; from Florian.Weimer@RUS.Uni-Stuttgart.DE on Thu, Feb 15, 2001 at 12:05:59PM +0100
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

On 2001-02-15 12:05:59 +0100, Florian Weimer wrote:

>>> The signature block at the bottom of the PGP/MIME signed
>>> message has a signature type byte in it, text vs binary.  Is
>>> it your assumption that the value in this type byte should
>>> control the hashing of the textual data which is earlier in
>>> the message?

>> Yes, of course.

> And thus breaking one-pass-processing, one of the fundamental
> design goals of MIME? ;-)

Not really. ,-)

> You have to put this information into the micalg parameter, I
> think.

By mandating that the two hashes coincide on all allowed data, we
can circumvent this.

-- 
Thomas Roessler			    <roessler@does-not-exist.org>


Received: by above.proper.com (8.9.3/8.9.3) id EAA25062 for ietf-openpgp-bks; Thu, 15 Feb 2001 04:28:35 -0800 (PST)
Received: from kasiski.gnupg.de (porta.u64.de [194.77.88.106]) by above.proper.com (8.9.3/8.9.3) with ESMTP id EAA25056 for <ietf-openpgp@imc.org>; Thu, 15 Feb 2001 04:28:32 -0800 (PST)
Received: from uucp by kasiski.gnupg.de with local-rmail (Exim 3.16 #1 (Debian)) id 14TNjY-0000nO-00; Thu, 15 Feb 2001 13:42:04 +0100
Received: from wk by alberti.gnupg.de with local (Exim 3.12 #1 (Debian)) id 14TNYV-0005GF-00; Thu, 15 Feb 2001 13:30:39 +0100
Date: Thu, 15 Feb 2001 13:30:39 +0100
From: Werner Koch <wk@gnupg.org>
To: ietf-openpgp@imc.org
Subject: Re: PGP/MIME implementors: text mode vs. binary mode?
Message-ID: <20010215133039.T19392@alberti.gnupg.de>
Mail-Followup-To: ietf-openpgp@imc.org
References: <200102131907.LAA02731@finney.org> <20010213205155.M16820@sobolev.does-not-exist.org> <tgwvascijs.fsf@mercury.rus.uni-stuttgart.de>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <tgwvascijs.fsf@mercury.rus.uni-stuttgart.de>; from Florian.Weimer@RUS.Uni-Stuttgart.DE on Thu, Feb 15, 2001 at 12:05:59PM +0100
X-PGP-KeyID: 621CC013
X-PGP-CertKey: A4D9 4E92 B098 6AB5 EE9D  CD75 5DE2 4996 5B03 58A2
X-Request-PGP: finger:wk@porta.u64.de
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

On Thu, 15 Feb 2001, Florian Weimer wrote:

> And thus breaking one-pass-processing, one of the fundamental design
> goals of MIME? ;-)

It won't work anyway:

|   The "micalg" parameter for the "application/pgp-signature" protocol
|   MUST contain exactly one hash-symbol of the format "pgp-<hash-
                 ^^^^^^^^^^^
This does not allow to have more than 1 signature in the second part
with different hash algorithms.  I know that this is addressed in
the multisig draft but it would be nice to have 2 signatures in this
protocol.

So why shouldn't we allow a wildcard or a list.  The only drawback
is that one has to apply multiple hash algorithms and select later
which to use.


-- 
Werner Koch                                              <wk@gnupg.org>
GNU Privacy Guard                                (http://www.gnupg.org)
Free Software Foundation Europe              (http://www.fsfeurope.org)
           [Please see X-* mail header for OpenPGP key info]



Received: by above.proper.com (8.9.3/8.9.3) id DAA19525 for ietf-openpgp-bks; Thu, 15 Feb 2001 03:14:13 -0800 (PST)
Received: from mercury.rus.uni-stuttgart.de (mercury.rus.uni-stuttgart.de [129.69.1.226]) by above.proper.com (8.9.3/8.9.3) with ESMTP id DAA19517 for <ietf-openpgp@imc.org>; Thu, 15 Feb 2001 03:14:11 -0800 (PST)
Received: from rusfw by mercury.rus.uni-stuttgart.de with local (Exim 3.12 #4) id 14TMEZ-0002zn-00 for ietf-openpgp@imc.org; Thu, 15 Feb 2001 12:05:59 +0100
To: ietf-openpgp@imc.org
Subject: Re: PGP/MIME implementors: text mode vs. binary mode?
References: <200102131907.LAA02731@finney.org> <20010213205155.M16820@sobolev.does-not-exist.org>
From: Florian Weimer <Florian.Weimer@RUS.Uni-Stuttgart.DE>
Date: 15 Feb 2001 12:05:59 +0100
In-Reply-To: <20010213205155.M16820@sobolev.does-not-exist.org>
Message-ID: <tgwvascijs.fsf@mercury.rus.uni-stuttgart.de>
Lines: 18
User-Agent: Gnus/5.0808 (Gnus v5.8.8) Emacs/20.7
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

Thomas Roessler <roessler@does-not-exist.org> writes:

> > The signature block at the bottom of the PGP/MIME signed message
> > has a signature type byte in it, text vs binary.  Is it your
> > assumption that the value in this type byte should control the
> > hashing of the textual data which is earlier in the message?
> 
> Yes, of course.

And thus breaking one-pass-processing, one of the fundamental design
goals of MIME? ;-)

You have to put this information into the micalg parameter, I think.

-- 
Florian Weimer 	                  Florian.Weimer@RUS.Uni-Stuttgart.DE
University of Stuttgart           http://cert.uni-stuttgart.de/
RUS-CERT                          +49-711-685-5973/fax +49-711-685-5898


Received: by above.proper.com (8.9.3/8.9.3) id EAA09903 for ietf-openpgp-bks; Wed, 14 Feb 2001 04:34:02 -0800 (PST)
Received: from internal.mail.demon.net (internal.mail.demon.net [193.195.224.3]) by above.proper.com (8.9.3/8.9.3) with ESMTP id EAA09895 for <ietf-openpgp@imc.org>; Wed, 14 Feb 2001 04:33:59 -0800 (PST)
Received: from pillar.turnpike.com (pillar.turnpike.com [194.70.55.2]) by internal.mail.demon.net with ESMTP id MAA22081; Wed, 14 Feb 2001 12:33:52 GMT
Message-ID: <tMoKFvB9qni6IAcQ@turnpike.com>
Date: Wed, 14 Feb 2001 12:31:57 +0000
To: ietf-openpgp@imc.org
From: Ian Bell <ianbell@turnpike.com>
Subject: Re: PGP 7.0 and PGP/MIME?
References: <20010213122610.D5652@sobolev.does-not-exist.org> <200102131401.JAA26581@citicom.com>
In-Reply-To: <200102131401.JAA26581@citicom.com>
MIME-Version: 1.0
X-Mailer: Turnpike Integrated Version 5.01 M <U2yaxlNz9mbtXQDcM+J3SutElj>
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

On Tue, 13 Feb 2001, Damon Gallaty <dgal@citicom.com> wrote:

>Before anyone asks, I'll answer the question: why don't all of NAI's PGP
>plug-ins recognize PGP/MIME? The answer is that, in order to recognize
>PGP/MIME, you must have access to the MIME headers, obviously.
>Unfortunately, not all of the MUA's allow plug-ins to access the MIME
>headers, thus there is no pratical way to parse or create PGP/MIME for
>those MUA's. Outlook and Outlook Express are two examples of this.

I think it should be possible to make Outlook verify PGP/MIME signed
messages, which would be a start.

Because of the need to support S/MIME, I have been told that Outlook
holds the entire RFC822 message in its raw form as well as in
proprietary MAPI form. I believe that there is a MAPI tag to get the raw
multipart/signed data.

-- 
Ian Bell                                           T U R N P I K E


Received: by above.proper.com (8.9.3/8.9.3) id AAA15054 for ietf-openpgp-bks; Wed, 14 Feb 2001 00:30:39 -0800 (PST)
Received: from smtp1.nikoma.de (smtp1.nikoma.de [212.122.128.19]) by above.proper.com (8.9.3/8.9.3) with ESMTP id AAA15036 for <ietf-openpgp@imc.org>; Wed, 14 Feb 2001 00:30:37 -0800 (PST)
Received: from sobolev.does-not-exist.org (dialin222.pg5-nt.frankfurt.nikoma.de [213.54.36.222]) by smtp1.nikoma.de (8.9.3/8.9.3) with ESMTP id JAA89142; Wed, 14 Feb 2001 09:30:30 +0100 (CET) (envelope-from roessler@does-not-exist.org)
Received: by sobolev.does-not-exist.org (Postfix, from userid 1000) id ACE822ED19; Wed, 14 Feb 2001 09:29:30 +0100 (CET)
Date: Wed, 14 Feb 2001 09:29:30 +0100
From: Thomas Roessler <roessler@does-not-exist.org>
To: hal@finney.org
Cc: warlord@mit.edu, ietf-openpgp@imc.org
Subject: Re: PGP/MIME implementors: text mode vs. binary mode?
Message-ID: <20010214092930.E32336@sobolev.does-not-exist.org>
Mail-Followup-To: hal@finney.org, warlord@MIT.EDU, ietf-openpgp@imc.org
References: <200102132359.PAA03769@finney.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.3.15i
In-Reply-To: <200102132359.PAA03769@finney.org>; from hal@finney.org on Tue, Feb 13, 2001 at 03:59:37PM -0800
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

On 2001-02-13 15:59:37 -0800, hal@finney.org wrote:

> Isn't the real, operational issue here a question of whether
> trailing white space should be hashed?  The choices are to say
> yes, or no, or it depends on the type byte in the signature.

> I can't help thinking that the distinction between text and
> binary mode is not that useful in solving this problem.  Let's
> not get hung up on the specification incompatibility between PGP
> 2.X and OpenPGP.

> The real question is whether to hash trailing whitespace or not.
> One way to help decide this is to look at how existing
> implementations do it.

Maybe.  With mutt, it currently depends on the PGP back-end used,
which is invoked as an external program.  However, we don't have
lots of problems with trailing whitespace in practice, because it's
avoided unless someone sets a certain shoot-yourself-into-the-foot
option.

> I can tell you that on message receipt, the commercial versions
> of PGP from Network Associates DO hash trailing whitespace on
> PGP/MIME messages. That is, they are sensitive to the presence of
> trailing whitespace and it is included in the hash.  This is true
> regardless of whether the signature type byte is text or binary
> mode.  That may or may not be compatible with the spec but that
> is how these versions work.

This means that you are interoperable with anyone else using pgp2 or
pgp5 as the back-end, but it also means that you are not
interoperable with people using pgp6 or gnupg as their back-ends, as
soon as trailing whitespace is involved.

To make things more interesting, people won't be able to just
decompose a PGP/MIME message and verify the signature as a "detached
signature" like they should be able to do - at least not if they use
the same version of PGP which verifies the signature nicely in their
MUA.

Oh well...


Since interoperability is an illusion anyway with respect to t.w.,
and things seem to work despite this, we should most likely really
just say that implementations MUST NOT feed any t.w. to the signer.

(Note that, in this case, your PGP/MIME code would just notice when
tw is added to a message, regardless of the signature type used.
It's really just a restriction on the sending end to help different
verifiers to produce consistent results.)

-- 
Thomas Roessler			    <roessler@does-not-exist.org>


Received: by above.proper.com (8.9.3/8.9.3) id QAA14165 for ietf-openpgp-bks; Tue, 13 Feb 2001 16:01:52 -0800 (PST)
Received: from finney.org (226-132.adsl2.netlojix.net [207.71.226.132]) by above.proper.com (8.9.3/8.9.3) with ESMTP id QAA14157 for <ietf-openpgp@imc.org>; Tue, 13 Feb 2001 16:01:49 -0800 (PST)
From: hal@finney.org
Received: (from hal@localhost) by finney.org (8.9.3/8.9.3) id PAA03769; Tue, 13 Feb 2001 15:59:37 -0800
Date: Tue, 13 Feb 2001 15:59:37 -0800
Message-Id: <200102132359.PAA03769@finney.org>
To: roessler@does-not-exist.org, warlord@mit.edu
Subject: Re: PGP/MIME implementors: text mode vs. binary mode?
Cc: hal@finney.org, ietf-openpgp@imc.org
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

Isn't the real, operational issue here a question of whether trailing
white space should be hashed?  The choices are to say yes, or no, or it
depends on the type byte in the signature.

I can't help thinking that the distinction between text and binary mode
is not that useful in solving this problem.  Let's not get hung up on
the specification incompatibility between PGP 2.X and OpenPGP.

The real question is whether to hash trailing whitespace or not.  One way
to help decide this is to look at how existing implementations do it.

I can tell you that on message receipt, the commercial versions of PGP
from Network Associates DO hash trailing whitespace on PGP/MIME messages.
That is, they are sensitive to the presence of trailing whitespace and
it is included in the hash.  This is true regardless of whether the
signature type byte is text or binary mode.  That may or may not be
compatible with the spec but that is how these versions work.

Hal


Received: by above.proper.com (8.9.3/8.9.3) id NAA04799 for ietf-openpgp-bks; Tue, 13 Feb 2001 13:48:45 -0800 (PST)
Received: from rcn.ihtfp.org (me@ORANGE-TOUR.IHTFP.ORG [204.107.200.33]) by above.proper.com (8.9.3/8.9.3) with ESMTP id NAA04792 for <ietf-openpgp@imc.org>; Tue, 13 Feb 2001 13:48:42 -0800 (PST)
Received: (from warlord@localhost) by rcn.ihtfp.org (8.9.3) id QAA16891; Tue, 13 Feb 2001 16:48:35 -0500
To: Thomas Roessler <roessler@does-not-exist.org>
Cc: hal@finney.org, ietf-openpgp@imc.org
Subject: Re: PGP/MIME implementors: text mode vs. binary mode?
References: <200102131907.LAA02731@finney.org> <sjm4rxyl4rf.fsf@rcn.ihtfp.org> <20010213220809.B24984@sobolev.does-not-exist.org>
From: Derek Atkins <warlord@mit.edu>
Date: 13 Feb 2001 16:48:35 -0500
In-Reply-To: Thomas Roessler's message of "Tue, 13 Feb 2001 22:08:09 +0100"
Message-ID: <sjmwvaujlu4.fsf@rcn.ihtfp.org>
Lines: 32
X-Mailer: Gnus v5.5/Emacs 20.3
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

Thomas Roessler <roessler@does-not-exist.org> writes:

> On 2001-02-13 15:14:28 -0500, Derek Atkins wrote:
> 
> > 	a) specify a canonicalization and require binary sigs.
> >	   Unfortunately this invalidates a number of
> >	   implementations that currently use text sigs.
> 
> > 	b) specify a canonicalization that matches text and allow
> >	   either binary or text sigs.  Unfortunately this has the
> >	   problem that RFC1991 and RFC2440 have different ideas
> >	   of what should be included in a text-mode signature.
> 
> > 	c) Change the PGP/MIME canonicalization requirements to
> >	   match RFC2440 text-mode.  This has the effect that
> >	   previous messages (and probably many implementations)
> >	   wont be PGP/MIME compliant.
> 
> What precisely is the difference between b) and c) supposed to be? I
> seem to be missing some point here.

Sorry, the difference between b and c is that in b I implied that
PGP/MIME use the RFC1991 canonicalization scheme, whereas in c I imply
using the RFC2440 canonicalization scheme.  I'm sorry I wasn't more
clear.

-derek
-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord@MIT.EDU                        PGP key available


Received: by above.proper.com (8.9.3/8.9.3) id NAA03293 for ietf-openpgp-bks; Tue, 13 Feb 2001 13:20:48 -0800 (PST)
Received: from smtp2.nikoma.de (smtp2.nikoma.de [212.122.128.25]) by above.proper.com (8.9.3/8.9.3) with ESMTP id NAA03289 for <ietf-openpgp@imc.org>; Tue, 13 Feb 2001 13:20:46 -0800 (PST)
Received: from sobolev.does-not-exist.org (dialin159.pg12-nt.frankfurt.nikoma.de [213.54.43.159]) by smtp2.nikoma.de (8.9.3/8.9.3) with ESMTP id WAA65695; Tue, 13 Feb 2001 22:20:31 +0100 (CET) (envelope-from roessler@does-not-exist.org)
Received: by sobolev.does-not-exist.org (Postfix, from userid 1000) id 5E73F2ED15; Tue, 13 Feb 2001 22:08:10 +0100 (CET)
Date: Tue, 13 Feb 2001 22:08:09 +0100
From: Thomas Roessler <roessler@does-not-exist.org>
To: Derek Atkins <warlord@mit.edu>
Cc: hal@finney.org, ietf-openpgp@imc.org
Subject: Re: PGP/MIME implementors: text mode vs. binary mode?
Message-ID: <20010213220809.B24984@sobolev.does-not-exist.org>
Mail-Followup-To: Derek Atkins <warlord@MIT.EDU>, hal@finney.org, ietf-openpgp@imc.org
References: <200102131907.LAA02731@finney.org> <sjm4rxyl4rf.fsf@rcn.ihtfp.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.3.15i
In-Reply-To: <sjm4rxyl4rf.fsf@rcn.ihtfp.org>; from warlord@MIT.EDU on Tue, Feb 13, 2001 at 03:14:28PM -0500
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

On 2001-02-13 15:14:28 -0500, Derek Atkins wrote:

> 	a) specify a canonicalization and require binary sigs.
>	   Unfortunately this invalidates a number of
>	   implementations that currently use text sigs.

> 	b) specify a canonicalization that matches text and allow
>	   either binary or text sigs.  Unfortunately this has the
>	   problem that RFC1991 and RFC2440 have different ideas
>	   of what should be included in a text-mode signature.

> 	c) Change the PGP/MIME canonicalization requirements to
>	   match RFC2440 text-mode.  This has the effect that
>	   previous messages (and probably many implementations)
>	   wont be PGP/MIME compliant.

What precisely is the difference between b) and c) supposed to be? I
seem to be missing some point here.

Anyway: When text and binary mode hashes (as I'll call them by abuse
of language) calculated according to RFC 2440 conincide, the text
hash from RFC 1991 coincides, too.  Additionally, protecting
trailing white space by way of an appropriate encoding has been a
good idea in the past, and was suggested and demonstrated in one of
the example messages in RFC 2015.

For this reason, we may actually be in the lucky situation that
implementations already fulfill most of the stricter requirements
suggested.

Maybe some implementors can say a word about this?

(To contribute my own part, mutt should be fine with it, and I'm
certainly willing to fix any holes through which trailing whitespace
might creep.)

-- 
Thomas Roessler			    <roessler@does-not-exist.org>


Received: (from majordomo@localhost) by above.proper.com (8.9.3/8.9.3) id MAA29600 for ietf-openpgp-bks; Tue, 13 Feb 2001 12:14:38 -0800 (PST)
Received: from rcn.ihtfp.org (me@ORANGE-TOUR.IHTFP.ORG [204.107.200.33]) by above.proper.com (8.9.3/8.9.3) with ESMTP id MAA29593 for <ietf-openpgp@imc.org>; Tue, 13 Feb 2001 12:14:34 -0800 (PST)
Received: (from warlord@localhost) by rcn.ihtfp.org (8.9.3) id PAA15214; Tue, 13 Feb 2001 15:14:28 -0500
To: hal@finney.org
Cc: roessler@does-not-exist.org, ietf-openpgp@imc.org
Subject: Re: PGP/MIME implementors: text mode vs. binary mode?
References: <200102131907.LAA02731@finney.org>
From: Derek Atkins <warlord@mit.edu>
Date: 13 Feb 2001 15:14:28 -0500
In-Reply-To: hal@finney.org's message of "Tue, 13 Feb 2001 11:07:30 -0800"
Message-ID: <sjm4rxyl4rf.fsf@rcn.ihtfp.org>
Lines: 75
X-Mailer: Gnus v5.5/Emacs 20.3
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

Hal,

The point is that when PGP/MIME was created with PGP 2.x (RFC1991),
the PGP/MIME canonicalization was such that it didn't matter which
type-byte you used; the hash would be the same.  The problem is that
OpenPGP (RFC2440) changes the definition of a text signature (please
excuse me for not quoting the exact type-byte value).

Because of this change, it is possible to create a text-signature with
OpenPGP that will fail with PGP 2.x (and vise-versa).  The major
difference is that RFC2440 specifies that you do not hash trailing
white-space (whereas in RFC1991 trailing white space was included in
the hash).

So here is the problem.  PGP/MIME specifies text canonicalization to
make binary and text signatures hash into the same value for RFC1991
signatures.  However, this is not the same for RFC2440 signatures.
The problem is that implementations want to be able to hash the
message in a single-pass, before they read the signature type-byte
from the signature.  Moreover, implementations want to hash the
message only once.

So, how do we maintain compatibility of PGP/MIME between RFC1991 and
RFC2440 versions of PGP, while maintaining the pre-hash, single-pass
processing?  As have been argued, there are a few ways to do this:

	a) specify a canonicalization and require binary sigs.
	   Unfortunately this invalidates a number of implementations
	   that currently use text sigs.

	b) specify a canonicalization that matches text and allow
	   either binary or text sigs.  Unfortunately this has the
	   problem that RFC1991 and RFC2440 have different ideas of
	   what should be included in a text-mode signature.

	c) Change the PGP/MIME canonicalization requirements to match
	   RFC2440 text-mode.  This has the effect that previous
	   messages (and probably many implementations) wont be
	   PGP/MIME compliant.

I don't know what the best way is.

-derek

hal@finney.org writes:

> There is something I'm still missing.
> 
> The signature block at the bottom of the PGP/MIME signed message has
> a signature type byte in it, text vs binary.  Is it your assumption
> that the value in this type byte should control the hashing of the
> textual data which is earlier in the message?
> 
> I don't know if this has to be true, but it may be helpful for
> implementations if it is true.
> 
> In that case there are two possibilities.  One is to mandate the value
> in this type byte, and thereby mandate the hashing which is done in the
> message.  Receivers would hash the message data according to the spec,
> and then when they came to the type byte, they could either ignore it
> or check it and complain if it is the wrong value.
> 
> The second possibility is to allow either value in this type byte, and
> thereby require that the receiver read the signature before it goes back
> and hashes the data (or else hash the data both ways).
> 
> Are these the alternatives as you see them?
> 
> Hal

-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord@MIT.EDU                        PGP key available


Received: (from majordomo@localhost) by above.proper.com (8.9.3/8.9.3) id LAA28538 for ietf-openpgp-bks; Tue, 13 Feb 2001 11:52:53 -0800 (PST)
Received: from smtp2.nikoma.de (smtp2.nikoma.de [212.122.128.25]) by above.proper.com (8.9.3/8.9.3) with ESMTP id LAA28533 for <ietf-openpgp@imc.org>; Tue, 13 Feb 2001 11:52:51 -0800 (PST)
Received: from sobolev.does-not-exist.org (dialin42.pg5-nt.frankfurt.nikoma.de [213.54.36.42]) by smtp2.nikoma.de (8.9.3/8.9.3) with ESMTP id UAA59902; Tue, 13 Feb 2001 20:52:48 +0100 (CET) (envelope-from roessler@does-not-exist.org)
Received: by sobolev.does-not-exist.org (Postfix, from userid 1000) id 8D0542ED15; Tue, 13 Feb 2001 20:51:55 +0100 (CET)
Date: Tue, 13 Feb 2001 20:51:55 +0100
From: Thomas Roessler <roessler@does-not-exist.org>
To: hal@finney.org
Cc: ietf-openpgp@imc.org
Subject: Re: PGP/MIME implementors: text mode vs. binary mode?
Message-ID: <20010213205155.M16820@sobolev.does-not-exist.org>
Mail-Followup-To: hal@finney.org, ietf-openpgp@imc.org
References: <200102131907.LAA02731@finney.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.3.15i
In-Reply-To: <200102131907.LAA02731@finney.org>; from hal@finney.org on Tue, Feb 13, 2001 at 11:07:30AM -0800
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

On 2001-02-13 11:07:30 -0800, hal@finney.org wrote:

> The signature block at the bottom of the PGP/MIME signed message
> has a signature type byte in it, text vs binary.  Is it your
> assumption that the value in this type byte should control the
> hashing of the textual data which is earlier in the message?

Yes, of course.

> I don't know if this has to be true, but it may be helpful for
> implementations if it is true.

If I sign a document in binary-mode, I want to be informed if
someone changes white space, or if line ends change. That is, in my
understanding, the type byte in the signature must mandate the kind
of hashing to be done - otherwise, it wouldn't terribly useful.

> In that case there are two possibilities.  One is to mandate the
> value in this type byte, and thereby mandate the hashing which is
> done in the message.  Receivers would hash the message data
> according to the spec, and then when they came to the type byte,
> they could either ignore it or check it and complain if it is the
> wrong value.

Right.

> The second possibility is to allow either value in this type
> byte, and thereby require that the receiver read the signature
> before it goes back and hashes the data (or else hash the data
> both ways).

> Are these the alternatives as you see them?

Basically, yes.  Hashing the data in different ways doesn't look
very elegant, and going back to the data is not an option, either
(at least in theory).

In order to avoid these two approaches, we either have to mandate
the kind hash to be taken, or we have to make sure that both ways of
taking hashes are identical on the data to be considered.


Symbolically: Take the message m, and let || denote concatenation.
In this case, a hash used in a binary signature is just this:

(b)	hash-function (m || 
		some-properties (signature packet)),

A hash used in a text signature, however, is:

(t)	hash-function (strip-whitespace-and-canonicalize (m) ||
		some-properties (signature packet))

My approach was to mandate use of either (b) or (t). Bodo's
(better!) approach is that m is invariant under
strip-whitespace-and-canonicalize, i.e.,

	m = strip-whitespace-and-canonicalize (m),

by choosing m appropriately; this is the same basic approach which
is also used in RFC 2015.

(However, there it's not strip-whitespace-and-canonicalize, but just
canonicalize.  Also, the same canonicalization as everywhere else in
MIME world can be applied, which makes RFC 2015 more elegant than
its successor.)

Finally, since hash-function (a, b) can also be written in the form

	hash-function' (hash-function'' (a), b),

implementations can just calculate hash-function'' (m), and put in
some-properties (signature packet) when they encounter the
signature.

-- 
Thomas Roessler			    <roessler@does-not-exist.org>


Received: by above.proper.com (8.9.3/8.9.3) id LAA25986 for ietf-openpgp-bks; Tue, 13 Feb 2001 11:09:45 -0800 (PST)
Received: from finney.org (226-132.adsl2.netlojix.net [207.71.226.132]) by above.proper.com (8.9.3/8.9.3) with ESMTP id LAA25979 for <ietf-openpgp@imc.org>; Tue, 13 Feb 2001 11:09:44 -0800 (PST)
From: hal@finney.org
Received: (from hal@localhost) by finney.org (8.9.3/8.9.3) id LAA02731; Tue, 13 Feb 2001 11:07:30 -0800
Date: Tue, 13 Feb 2001 11:07:30 -0800
Message-Id: <200102131907.LAA02731@finney.org>
To: hal@finney.org, roessler@does-not-exist.org
Subject: Re: PGP/MIME implementors: text mode vs. binary mode?
Cc: ietf-openpgp@imc.org
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

There is something I'm still missing.

The signature block at the bottom of the PGP/MIME signed message has
a signature type byte in it, text vs binary.  Is it your assumption
that the value in this type byte should control the hashing of the
textual data which is earlier in the message?

I don't know if this has to be true, but it may be helpful for
implementations if it is true.

In that case there are two possibilities.  One is to mandate the value
in this type byte, and thereby mandate the hashing which is done in the
message.  Receivers would hash the message data according to the spec,
and then when they came to the type byte, they could either ignore it
or check it and complain if it is the wrong value.

The second possibility is to allow either value in this type byte, and
thereby require that the receiver read the signature before it goes back
and hashes the data (or else hash the data both ways).

Are these the alternatives as you see them?

Hal


Received: by above.proper.com (8.9.3/8.9.3) id LAA25919 for ietf-openpgp-bks; Tue, 13 Feb 2001 11:09:12 -0800 (PST)
Received: from rcn.ihtfp.org (me@ORANGE-TOUR.IHTFP.ORG [204.107.200.33]) by above.proper.com (8.9.3/8.9.3) with ESMTP id LAA25904 for <ietf-openpgp@imc.org>; Tue, 13 Feb 2001 11:09:08 -0800 (PST)
Received: (from warlord@localhost) by rcn.ihtfp.org (8.9.3) id OAA15152; Tue, 13 Feb 2001 14:08:36 -0500
To: Bram Cohen <bram@gawth.com>
Cc: ietf-openpgp@imc.org, mail-client-dev-list@lists.sourceforge.net, pgp-mime@lists.uchicago.edu, coderpunks@toad.com
Subject: Re: PGP/MIME implementors: text mode vs. binary mode?
References: <Pine.LNX.4.21.0102131157020.32387-100000@ultra.gawth.com>
From: Derek Atkins <warlord@mit.edu>
Date: 13 Feb 2001 14:08:36 -0500
In-Reply-To: Bram Cohen's message of "Tue, 13 Feb 2001 11:57:46 -0800 (PST)"
Message-ID: <sjmae7ql7t7.fsf@rcn.ihtfp.org>
Lines: 14
X-Mailer: Gnus v5.5/Emacs 20.3
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

Bram Cohen <bram@gawth.com> writes:

> Good thing pgp is standardized, otherwise we might wind up with
> incompatible implementations.

The wonderful thing about standards... There are so many to choose from!
;)

-derek
-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord@MIT.EDU                        PGP key available


Received: by above.proper.com (8.9.3/8.9.3) id KAA23627 for ietf-openpgp-bks; Tue, 13 Feb 2001 10:47:10 -0800 (PST)
Received: from gawth.com (IDENT:qmailr@[209.95.123.254]) by above.proper.com (8.9.3/8.9.3) with SMTP id KAA23621 for <ietf-openpgp@imc.org>; Tue, 13 Feb 2001 10:47:09 -0800 (PST)
Received: (qmail 1116 invoked by uid 524); 13 Feb 2001 19:57:46 -0000
Received: from localhost (sendmail-bs@127.0.0.1) by localhost with SMTP; 13 Feb 2001 19:57:46 -0000
Date: Tue, 13 Feb 2001 11:57:46 -0800 (PST)
From: Bram Cohen <bram@gawth.com>
To: ietf-openpgp@imc.org
cc: mail-client-dev-list@lists.sourceforge.net, pgp-mime@lists.uchicago.edu, coderpunks@toad.com
Subject: Re: PGP/MIME implementors: text mode vs. binary mode?
In-Reply-To: <20010213135427.A9840@sobolev.does-not-exist.org>
Message-ID: <Pine.LNX.4.21.0102131157020.32387-100000@ultra.gawth.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

On Tue, 13 Feb 2001, Thomas Roessler wrote:

> In the ietf-openpgp working group, we are about to finish a revised
> version of RFC 2015.  While this looked like an easy task at first
> sight, it is not, since OpenPGP breaks traditional pgp's text-mode
> signatures.

Good thing pgp is standardized, otherwise we might wind up with
incompatible implementations.

-Bram Cohen

"Markets can remain irrational longer than you can remain solvent"
                                        -- John Maynard Keynes



Received: by above.proper.com (8.9.3/8.9.3) id KAA23141 for ietf-openpgp-bks; Tue, 13 Feb 2001 10:37:15 -0800 (PST)
Received: from smtp2.nikoma.de (smtp2.nikoma.de [212.122.128.25]) by above.proper.com (8.9.3/8.9.3) with ESMTP id KAA23136 for <ietf-openpgp@imc.org>; Tue, 13 Feb 2001 10:37:14 -0800 (PST)
Received: from sobolev.does-not-exist.org (dialin240.pg5-nt.frankfurt.nikoma.de [213.54.36.240]) by smtp2.nikoma.de (8.9.3/8.9.3) with ESMTP id TAA53929; Tue, 13 Feb 2001 19:37:03 +0100 (CET) (envelope-from roessler@does-not-exist.org)
Received: by sobolev.does-not-exist.org (Postfix, from userid 1000) id 68ECA2ED19; Tue, 13 Feb 2001 19:32:55 +0100 (CET)
Date: Tue, 13 Feb 2001 19:32:55 +0100
From: Thomas Roessler <roessler@does-not-exist.org>
To: hal@finney.org
Cc: ietf-openpgp@imc.org
Subject: Re: PGP/MIME implementors: text mode vs. binary mode?
Message-ID: <20010213193255.D16820@sobolev.does-not-exist.org>
Mail-Followup-To: hal@finney.org, ietf-openpgp@imc.org
References: <200102131719.JAA01256@finney.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.3.15i
In-Reply-To: <200102131719.JAA01256@finney.org>; from hal@finney.org on Tue, Feb 13, 2001 at 09:19:37AM -0800
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

On 2001-02-13 09:19:37 -0800, hal@finney.org wrote:
> Thomas, Roessler <roessler@does-not-exist.org>, writes:
>> Now, for PGP/MIME, this turns into a really ugly problem: RFC
>> 2015 does not specify which kind of signature to use. However,
>> it does specify how the signed material should be canonicalized
>> before hashing.

[...]

> In that case, the second question above, "what exactly should be
> hashed" is an open one.

> Could you clarify which of these questions is/are at issue?

With traditional PGP, a text mode signature means that PGP
canonicalizes line endings, and then calculate the hash over the
result.  A binary signature would just hash the raw data.

With OpenPGP, a text mode signature means that the implementation
strips trailing white space, canonicalizes line endings, and
caluclates the hash over the result.

Obviously, these text signatures are based on different hash values
as soon as any trailing white space is involved.

Now, what RFC 2015 does is to pre-canonicalize the signed material
in a way which lets the distinction between binary and
(traditional!) text mode signatures disappear, as far as the hashes
are concerned. Thus, a verifier can calculate a single hash without
knowing about the kind of signature, and then verify the signature
when it's encountered in the input stream.

My suggestion was now to mandate one of the signature modes, and
thus one way to hash the data.  However, as Bodo pointed out
correctly, it's most likely more reasonable to put in a further
restriction on the signed data, and leave the binary vs text
question unspecified.

-- 
Thomas Roessler			    <roessler@does-not-exist.org>


Received: by above.proper.com (8.9.3/8.9.3) id JAA19156 for ietf-openpgp-bks; Tue, 13 Feb 2001 09:21:51 -0800 (PST)
Received: from finney.org (226-132.adsl2.netlojix.net [207.71.226.132]) by above.proper.com (8.9.3/8.9.3) with ESMTP id JAA19152 for <ietf-openpgp@imc.org>; Tue, 13 Feb 2001 09:21:50 -0800 (PST)
From: hal@finney.org
Received: (from hal@localhost) by finney.org (8.9.3/8.9.3) id JAA01256 for ietf-openpgp@imc.org; Tue, 13 Feb 2001 09:19:37 -0800
Date: Tue, 13 Feb 2001 09:19:37 -0800
Message-Id: <200102131719.JAA01256@finney.org>
To: ietf-openpgp@imc.org
Subject: Re: PGP/MIME implementors: text mode vs. binary mode?
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

Thomas, Roessler <roessler@does-not-exist.org>, writes:
> Now, for PGP/MIME, this turns into a really ugly problem: RFC 2015
> does not specify which kind of signature to use. However, it does
> specify how the signed material should be canonicalized before
> hashing.

I don't fully understand what you are saying here.  When you talk about
"what kind of signature to use", are you referring SOLELY to the value of
the signature-type byte within the signature packet?  This is the byte
which is described in RFC2440, section 5.2.1, as 0x00 for a signature
of a binary document, and 0x01 for a signature of a text document.

Is this the ONLY question as issue, what value to put into this byte?

Or, is there a separate question: what exactly should be hashed?

Above you say that RFC2015 specifies how the signed material should be
canonicalized before hashing.  If this is true, then the second question
is not at issue, because you'd have a precise specification of what
exactly should be hashed, for any given PGP/MIME message.

However I don't see that RFC2015bis does precisely specify what is hashed.
In section 5, it describes some canonicalization rules, and then says,

   (4)  As described in [2], the digital signature MUST be calculated
        over both the data to be signed and its set of content headers.

(where [2] is RFC1847, Security Multiparts for MIME).

This does not explicitly describe what is hashed.  Rather, it describes a
pre-processing step before calculating a digital signature over the data.
The question of what is hashed would then depend on what the signature
engine does to the data AFTER you have prepared it as described in
RFC2015.

In that case, the second question above, "what exactly should be hashed"
is an open one.

Could you clarify which of these questions is/are at issue?

Hal Finney


Received: (from majordomo@localhost) by above.proper.com (8.9.3/8.9.3) id IAA15062 for ietf-openpgp-bks; Tue, 13 Feb 2001 08:00:49 -0800 (PST)
Received: from smtp1.nikoma.de (smtp1.nikoma.de [212.122.128.19]) by above.proper.com (8.9.3/8.9.3) with ESMTP id IAA15058 for <ietf-openpgp@imc.org>; Tue, 13 Feb 2001 08:00:48 -0800 (PST)
Received: from sobolev.does-not-exist.org (dialin215.pg7-nt.frankfurt.nikoma.de [213.54.38.215]) by smtp1.nikoma.de (8.9.3/8.9.3) with ESMTP id QAA40770; Tue, 13 Feb 2001 16:59:31 +0100 (CET) (envelope-from roessler@does-not-exist.org)
Received: by sobolev.does-not-exist.org (Postfix, from userid 1000) id B60482ED15; Tue, 13 Feb 2001 16:58:37 +0100 (CET)
Date: Tue, 13 Feb 2001 16:58:37 +0100
From: Thomas Roessler <roessler@does-not-exist.org>
To: Bodo Moeller <bmoeller@hrzpub.tu-darmstadt.de>
Cc: ietf-openpgp@imc.org
Subject: Re: PGP/MIME implementors: text mode vs. binary mode?
Message-ID: <20010213165837.A16525@sobolev.does-not-exist.org>
Mail-Followup-To: Bodo Moeller <bmoeller@hrzpub.tu-darmstadt.de>, ietf-openpgp@imc.org
References: <20010213135427.A9840@sobolev.does-not-exist.org> <20010213152233.A13702@cdc.informatik.tu-darmstadt.de>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="1yeeQ81UyVL57Vl7"
Content-Disposition: inline
User-Agent: Mutt/1.3.15i
In-Reply-To: <20010213152233.A13702@cdc.informatik.tu-darmstadt.de>; from bmoeller@hrzpub.tu-darmstadt.de on Tue, Feb 13, 2001 at 03:22:33PM +0100
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

--1yeeQ81UyVL57Vl7
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On 2001-02-13 15:22:33 +0100, Bodo Moeller wrote:

> Again, this is only true only if binary-mode signatures are made
> mandatory.  If both forms are legal, with the restriction the
> senders have to avoid trailing unencoded whitespace (but
> recipients are not required to strip any trailing whitespace
> before interpreting the message), then it is up to the senders to
> decide if they want to use binary-mode signatures as a
> countermeasure against addition of whitespace in transit or if
> they think that text-mode signatures suffice; and clients will
> still be able to verify signatures in a single pass.

This suggestion indeed sounds quite reasonable.  Thanks!


Actually, thinking a bit more about this, I think I found one case
in which trailing white space can make a semantic difference. (Which
would be another argument for mandating binary mode, however.)

More precisely, let's have a look at RFC822's grammar:

     field       =3D  field-name ":" [ field-body ] CRLF
     field-body  =3D  field-body-contents
     		    [CRLF LWSP-char field-body]
     field-body-contents =3D <the ASCII characters making up the
		    field-body, as defined in the following
		    sections, and consisting of combinations of
		    atom, quoted-string, and specials tokens, or
		    else consisting of texts>

field-body-contents can, in particular, consist entirely of
whitespace.

Example:

	^some-tag: some text$
	^    $
	^ some more text$
	^next-tag: ...$
	^$
	^body$

(^ marks the beginning of the line, $ the end of the line).

I.e., within an RFC822 header (which can in turn be any MIME header,
or a message header within a message/rfc822 body part), a line which
entirely consists of whitespace will be folded, and will - in
paritcular - _not_ separate the header from the body.  This
semantics will, of course, change if the MUA removes trailing white
space before the message is sent.  To make things still worse, we
can't even call quoted-printable or base64 to the rescue, since
nested encodings are explicitly prohibited.


What do you think - should we really worry about this, or should we
just put a warning into the Security Considerations section of the
text, pointing out that this case can happen and that
implementations should avoid it when sending messages, which is what
I'd suggest?

--=20
Thomas Roessler			    <roessler@does-not-exist.org>

--1yeeQ81UyVL57Vl7
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3in

iQEVAwUBOolZrdImKUTOasbBAQHIuQgAs1Z2O+y08AMMCtRMm7HN79rCHLdHvwvc
ApH/zDAtIwiRciRYaSs2+Uo838G6BEHdhzCTcMxCrK2GTIKmoaiiuf1nslqY3lUB
E72FriF0V2YCERqjBE0/qXRnWqBZFL0DzAlGoPjq498FRgCHxjFTduhyjQ57bcVn
vp1IXxd+5iJpocmvbF5np6UBwkiKYbVs/0qbDhHXUIjAr4mn/xLivyFRQyA43cB7
n7PJxeL6+a2hvzudNdgbqNLOmHnONjthmvBmIzH5CTonmIUBo/GKVxekveUkjxwI
LPJoI0NNnbSfegjMpuDjNnlqcCjuuhUtnN8geddnUJA9YgFpl+Xt8A==
=ME1X
-----END PGP SIGNATURE-----

--1yeeQ81UyVL57Vl7--


Received: by above.proper.com (8.9.3/8.9.3) id HAA08520 for ietf-openpgp-bks; Tue, 13 Feb 2001 07:06:32 -0800 (PST)
Received: from smtp1.nikoma.de (smtp1.nikoma.de [212.122.128.19]) by above.proper.com (8.9.3/8.9.3) with ESMTP id HAA08514 for <ietf-openpgp@imc.org>; Tue, 13 Feb 2001 07:06:30 -0800 (PST)
Received: from sobolev.does-not-exist.org (dialin42.pg7-nt.frankfurt.nikoma.de [213.54.38.42]) by smtp1.nikoma.de (8.9.3/8.9.3) with ESMTP id QAA37144; Tue, 13 Feb 2001 16:06:26 +0100 (CET) (envelope-from roessler@does-not-exist.org)
Received: by sobolev.does-not-exist.org (Postfix, from userid 1000) id 635E72ED19; Tue, 13 Feb 2001 15:11:18 +0100 (CET)
Date: Tue, 13 Feb 2001 15:11:18 +0100
From: Thomas Roessler <roessler@does-not-exist.org>
To: Damon Gallaty <dgal@citicom.com>
Cc: ietf-openpgp@imc.org
Subject: Re: PGP 7.0 and PGP/MIME?
Message-ID: <20010213151118.E11947@sobolev.does-not-exist.org>
Mail-Followup-To: Damon Gallaty <dgal@citicom.com>, ietf-openpgp@imc.org
References: <20010213122610.D5652@sobolev.does-not-exist.org> <200102131401.JAA26581@citicom.com>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="M38YqGLZlgb6RLPS"
Content-Disposition: inline
User-Agent: Mutt/1.3.15i
In-Reply-To: <200102131401.JAA26581@citicom.com>; from dgal@citicom.com on Tue, Feb 13, 2001 at 09:01:30AM -0500
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

--M38YqGLZlgb6RLPS
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On 2001-02-13 09:01:30 -0500, Damon Gallaty wrote:

> The problem was with sending PGP/MIME from Mutt and receiving it
> in Eudora. The PGP plug-in was failing to recognize that the
> message contained PGP/MIME.=20

I hope there was no bug on our (mutt's) side involved with this?

> The other "problem" mentioned is not a bug at all. As you
> probably guessed from Derek's note, the person sending from
> Eudora to Mutt is not even using PGP/MIME. but instead is using
> the "classic" PGP format. PGP/MIME is an option that the user can
> turn on or off in NAI PGP products, since PGP/MIME is not
> universally recognized in all PGP plug-ins yet (not even our
> own).

=46rom the Usenet article of this guy, there were two sides to the
problem:

- Eudora sending classical PGP messages tagged as text/plain.  This
  is, of course, the setting you describe.

- Eudora not at all recognizing PGP/MIME.  I hope this is indeed the
  bug you described, and not another consequence of not selecting
  PGP/MIME?

Cheers,
--=20
Thomas Roessler			    <roessler@does-not-exist.org>

--M38YqGLZlgb6RLPS
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3in

iQEVAwUBOolAhtImKUTOasbBAQETiAf/eDbkCm04BEPrA2/1Upb3hWNP+SGGBRzZ
k1zPGLKVgJcGnaBrKADx2NQtNE+KRXgMA7+wgooWhC326jlDkv6Ay7cDO5jwpDP+
v4iwu5BS0hEHqzW8VGUMX1k+C+SNTkFV/kr3W1Q5eR3H421D5zM7nrIZ7OTggyjE
11TZvhYJiaQzCPw9SMeFvSXBPg1LHE1v8vuXwNXQTKvHixT/9hkr3z3QKia7iigf
IU9CxA4TYAAiWI5e/fAqa8bcmw1nARoXOWQCHB+YPeFvVjfhJXG07KY/Stxl9GnG
rm7oY82hcPv/0YZrNsM2610KFKdnct+0WzbwUWgkW9ydmzVKwk91+g==
=cPqV
-----END PGP SIGNATURE-----

--M38YqGLZlgb6RLPS--


Received: by above.proper.com (8.9.3/8.9.3) id GAA06121 for ietf-openpgp-bks; Tue, 13 Feb 2001 06:22:22 -0800 (PST)
Received: from cdc-info.cdc.informatik.tu-darmstadt.de (cdc-info.cdc.informatik.tu-darmstadt.de [130.83.23.100]) by above.proper.com (8.9.3/8.9.3) with ESMTP id GAA06116 for <ietf-openpgp@imc.org>; Tue, 13 Feb 2001 06:22:20 -0800 (PST)
Received: from cdc-ws1.cdc.informatik.tu-darmstadt.de (cdc-ws1 [130.83.23.129]) by cdc-info.cdc.informatik.tu-darmstadt.de (Postfix) with ESMTP id 720D52C52; Tue, 13 Feb 2001 15:22:22 +0100 (MET)
Received: (from moeller@localhost) by cdc-ws1.cdc.informatik.tu-darmstadt.de (8.9.3+Sun/8.9.3) id PAA13720; Tue, 13 Feb 2001 15:22:33 +0100 (MET)
X-Authentication-Warning: cdc-ws1.cdc.informatik.tu-darmstadt.de: moeller set sender to bmoeller@hrzpub.tu-darmstadt.de using -f
Date: Tue, 13 Feb 2001 15:22:33 +0100
From: Bodo Moeller <bmoeller@hrzpub.tu-darmstadt.de>
To: ietf-openpgp@imc.org
Subject: Re: PGP/MIME implementors: text mode vs. binary mode?
Message-ID: <20010213152233.A13702@cdc.informatik.tu-darmstadt.de>
References: <20010213135427.A9840@sobolev.does-not-exist.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
User-Agent: Mutt/1.2i
In-Reply-To: <20010213135427.A9840@sobolev.does-not-exist.org>; from roessler@does-not-exist.org on Tue, Feb 13, 2001 at 01:54:27PM +0100
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

On Tue, Feb 13, 2001 at 01:54:27PM +0100, Thomas Roessler wrote:

[...]
> * text-mode signatures
[...]
>   - there are incompatibilities between implementations which use
>     text-mode AND leave trailing white space in messages.
>   - thus, clients will need additional code in order to avoid
>     trailing whitespace (e.g., apply quoted-printable).

There is no need to use quoted-printable to avoid trailing whitespace
in this case.  Applications that use text-mode signatures because they
consider trailing whitespace not significant can simply delete such
whitespace.  (Only in cases where you are worried about unauthorized
removal of whitespace but not about unauthorized addition of whitespace,
quoted-printable is required; e.g. "-- " signature separators.)

>   - this will make any clients non-compliant which are using binary
>     mode today.

This is true only if text-mode signatures are made mandatory.  An
alternative is to allow both text-mode and binary signatures, but to
impose restrictions on the data to be signed so that the respective
hashes coincide -- i.e., disallow trailing whitespace unless encoded
such that it is no longer trailing whitespace as far as OpenPGP is
concerned.


> * binary-mode signatures
[...]
>   + clients are interoperable regardless of the back-end version
>     used and regardless of the treatment of trailing whitespace.

The same is true if text-mode signatures are used and senders strictly
avoid trailing whitespace.

[...]
>   - this will make any clients non-compliant which are using text
>     mode today.

Again, this is only true only if binary-mode signatures are made
mandatory.  If both forms are legal, with the restriction the senders
have to avoid trailing unencoded whitespace (but recipients are not
required to strip any trailing whitespace before interpreting the
message), then it is up to the senders to decide if they want to use
binary-mode signatures as a countermeasure against addition of
whitespace in transit or if they think that text-mode signatures
suffice; and clients will still be able to verify signatures in a
single pass.


-- 
Bodo Möller <moeller@cdc.informatik.tu-darmstadt.de>
PGP http://www.informatik.tu-darmstadt.de/TI/Mitarbeiter/moeller/0x36d2c658.html
* TU Darmstadt, Theoretische Informatik, Alexanderstr. 10, D-64283 Darmstadt
* Tel. +49-6151-16-6628, Fax +49-6151-16-6036


Received: (from majordomo@localhost) by above.proper.com (8.9.3/8.9.3) id GAA05212 for ietf-openpgp-bks; Tue, 13 Feb 2001 06:02:12 -0800 (PST)
Received: from citicom.com (citicom.com [207.138.160.1]) by above.proper.com (8.9.3/8.9.3) with ESMTP id GAA05205 for <ietf-openpgp@imc.org>; Tue, 13 Feb 2001 06:02:10 -0800 (PST)
Received: from dgal-ws1 (dgal-ws1.cust.citicom.com [207.138.162.226]) by citicom.com (8.9.3/CITICOM-E) with SMTP id JAA26581; Tue, 13 Feb 2001 09:01:38 -0500
Message-Id: <200102131401.JAA26581@citicom.com>
From: "Damon Gallaty" <dgal@citicom.com>
To: "Thomas Roessler" <roessler@does-not-exist.org>
Cc: <ietf-openpgp@imc.org>
Subject: RE: PGP 7.0 and PGP/MIME?
Date: Tue, 13 Feb 2001 09:01:30 -0500
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook 8.5, Build 4.71.2173.0
In-Reply-To: <20010213122610.D5652@sobolev.does-not-exist.org>
X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3110.3
Importance: Normal
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The problem was with sending PGP/MIME from Mutt and receiving it in Eudora.
The PGP plug-in was failing to recognize that the message contained
PGP/MIME. The other "problem" mentioned is not a bug at all. As you
probably guessed from Derek's note, the person sending from Eudora to Mutt
is not even using PGP/MIME. but instead is using the "classic" PGP format.
PGP/MIME is an option that the user can turn on or off in NAI PGP products,
since PGP/MIME is not universally recognized in all PGP plug-ins yet (not
even our own).

Before anyone asks, I'll answer the question: why don't all of NAI's PGP
plug-ins recognize PGP/MIME? The answer is that, in order to recognize
PGP/MIME, you must have access to the MIME headers, obviously.
Unfortunately, not all of the MUA's allow plug-ins to access the MIME
headers, thus there is no pratical way to parse or create PGP/MIME for
those MUA's. Outlook and Outlook Express are two examples of this.

- - Damon Gallaty

-----BEGIN PGP SIGNATURE-----
Version: PGP 7.0.3

iQA/AwUBOok961b/7csIIkCJEQK65ACguFlyxOVAZb2CGBgItiKn1uwhx0cAnRrf
uCnA1/uKwxuNOwJCbfx4KLhx
=Fi8k
-----END PGP SIGNATURE-----


> -----Original Message-----
> From: owner-ietf-openpgp@mail.imc.org
> [mailto:owner-ietf-openpgp@mail.imc.org]On Behalf Of Thomas Roessler
> Sent: Tuesday, February 13, 2001 6:26 AM
> To: dgal@citicom.com
> Cc: ietf-openpgp@imc.org
> Subject: Re: PGP 7.0 and PGP/MIME?
>
>
> May I ask what kind of problem this was?
>
> (I mean, the description from comp.mail.mutt - as Derek noted -
> really sounds like no PGP/MIME was done at all.)
>
> On 2001-02-12 17:34:07 -0500, Damon Gallaty wrote:
> > Reply-To: <dgal@citicom.com>
> > From: "Damon Gallaty" <dgal@pgp.com>
> > To: <ietf-openpgp@imc.org>
> > Subject: RE: PGP 7.0 and PGP/MIME?
> > Date: Mon, 12 Feb 2001 17:34:07 -0500
> > X-Mailer: Microsoft Outlook 8.5, Build 4.71.2173.0
> >
> > There was a problem with PGP/MIME between the Eudora plug-in and Mutt
> > specifically, which has been fixed. PGP 7.0.3 should contain this fix.
> >
> > - Damon Gallaty
> >
> >
> >
> > > -----Original Message-----
> > > From: owner-ietf-openpgp@mail.imc.org
> > > [mailto:owner-ietf-openpgp@mail.imc.org]On Behalf Of Thomas Roessler
> > > Sent: Monday, February 12, 2001 1:38 PM
> > > To: ietf-openpgp@imc.org
> > > Subject: PGP 7.0 and PGP/MIME?
> > >
> > >
> > > I can't resist from forwarding this.  Is it really true that PGP
> > > 7.0's MUA plugins STILL don't get PGP/MIME right?  If so: Why?
> > >
> > >
> > > ----- Forwarded message -----
> > > From: <juergen@cavemaus.fiedlerfamily.net>
> > > Newsgroups: comp.mail.mutt
> > > Subject: Mutt, GnuPG and PGP/Win98
> > > Date: Mon, 12 Feb 2001 18:11:10 -0000
> > >
> > > Hi!
> > >
> > > I am trying to communicate securely with someone who is using Win98.
> > > She is mainly using Eudora with a PGP 7.0.x plugin, I am using mutt
> > > 1.2.5 with gnupg 1.0.4.
> > > The problem is thus:
> > > When I send an encrypted message to her, it appears with an empty
> > > body and 2 attachments: One just contains the string 'version 1.0',
> > > the second one contains the actual message. Eudora/PGP can't deal
> > > with that.
> > > When she sends me an encrypted message, it shows up with content
> > > type 'text/plain' and the whole encrypted message is in the body.
> > > I can decrypt it by pressing the '|' key and then typing 'gpg',
> > > but I know that mutt has the potential to automatically recognize
> > > encrypted messages; it does it when I send messages to myself. But
> > > those come from mutt, of course.
> > >
> > > Does anyone know what we are doing wrong (besides our choice of
> > > operating systems)? Any input would be appreciated.
> > >
> > > Thanks,
> > > j
> > >
> > >
> > > ---- End forwarded message-----
> > >
> > > --
> > > Thomas Roessler			    <roessler@does-not-exist.org>
> > >
> >
> >
>
> --
> Thomas Roessler			    <roessler@does-not-exist.org>
>




Received: (from majordomo@localhost) by above.proper.com (8.9.3/8.9.3) id EAA29339 for ietf-openpgp-bks; Tue, 13 Feb 2001 04:55:25 -0800 (PST)
Received: from smtp1.nikoma.de (smtp1.nikoma.de [212.122.128.19]) by above.proper.com (8.9.3/8.9.3) with ESMTP id EAA29335 for <ietf-openpgp@imc.org>; Tue, 13 Feb 2001 04:55:23 -0800 (PST)
Received: from sobolev.does-not-exist.org (dialin124.pg7-nt.frankfurt.nikoma.de [213.54.38.124]) by smtp1.nikoma.de (8.9.3/8.9.3) with ESMTP id NAA28291; Tue, 13 Feb 2001 13:55:19 +0100 (CET) (envelope-from roessler@does-not-exist.org)
Received: by sobolev.does-not-exist.org (Postfix, from userid 1000) id 2CB1C2ED19; Tue, 13 Feb 2001 13:54:28 +0100 (CET)
Date: Tue, 13 Feb 2001 13:54:27 +0100
From: Thomas Roessler <roessler@does-not-exist.org>
To: mail-client-dev-list@lists.sourceforge.net, pgp-mime@lists.uchicago.edu, coderpunks@toad.com
Cc: ietf-openpgp@imc.org
Subject: PGP/MIME implementors: text mode vs. binary mode?
Message-ID: <20010213135427.A9840@sobolev.does-not-exist.org>
Reply-To: ietf-openpgp@imc.org
Mail-Followup-To: ietf-openpgp@imc.org
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.3.15i
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

Please forward this message to any implementors of PGP/MIME you are
aware of.



To whom it may concern.

In the ietf-openpgp working group, we are about to finish a revised
version of RFC 2015.  While this looked like an easy task at first
sight, it is not, since OpenPGP breaks traditional pgp's text-mode
signatures.  This message is to solicit further input and comments
from other implementors of PGP/MIME.  (We thought we were done, but
then there were more arguments against the solution we believed to
have found...)

The current draft is draft-ietf-openpgp-mime-04.txt, and available
from: <http://www.ietf.org/internet-drafts/draft-ietf-openpgp-mime-04.txt>.

Please direct any answers to this message to the ietf-openpgp
mailing list.  In order to subscribe to that list, send a message to
<ietf-openpgp-request@imc.org> with the single word "subscribe" in
the subject.



The Problem.

To pgp 2 and 5, a text-mode signature meant that line endings were
transformed to a CR-LF sequence, and the result was then hashed.
However, with OpenPGP, preparing a text-mode signature has another
effect: Trailing blanks (and tabs?) are stripped - this is what used
to be done as a clear-sign signature with traditional PGP.  Of
course, this is a bug in the spec, but one which won't be easily
fixed now that all the implementations are out there.


Now, for PGP/MIME, this turns into a really ugly problem: RFC 2015
does not specify which kind of signature to use. However, it does
specify how the signed material should be canonicalized before
hashing.  This method of canonicalization exactly matched what was
done by traditional PGP versions for text mode signatures, which
means that the very same hash value could be used to verify either a
text-mode or a binary-mode signature.  That way, PGP/MIME according
to RFC 2015 and with traditional PGP had the desired one-pass
properties.

With OpenPGP, this construction breaks badly as soon as trailing
white space is involved.  Since it doesn't look right or elegant to
ask implementors of one-pass parsers (if they exist) to calculate
two hashes in parallel, some decision has to be made on the kind of
signature which should be mandated for the future.

I'm listing the choices and the pros and cons I'm seeing:

* text-mode signatures

  + easy to implement if you invoke a command-line tool to which you
    can leave the details of canonicalization.
  - Ian Bell of turnpike.com tells me that it's hard to persuade the
    PGP SDK to produce detached text-mode signatures.
  + the new-style text-mode signatures will nicely ignore any
    whitespace changes which are irrelevant to the message's content
    (When used the right way, MIME is invariant under modifications of
    trailing whitespace.)
  - there are incompatibilities between implementations which use
    text-mode AND leave trailing white space in messages.
  - thus, clients will need additional code in order to avoid
    trailing whitespace (e.g., apply quoted-printable).
  - this will make any clients non-compliant which are using binary
    mode today.

* binary-mode signatures

  + easy to implement if you use the PGP SDK (I'm told).
  + clients are interoperable regardless of the back-end version
    used and regardless of the treatment of trailing whitespace.
  - those people who rely on "pgp -t" will have to add some code to
    pass canonicalized data to the back-end.  In some cases, this
    may badly break things.
  - signatures will break upon changes to trailing white space which
    don't affect the message's content or MIME semantics
  - thus, clients may need additional code in order to avoid
    trailing whitespace (e.g., apply quoted-printable).
  - this will make any clients non-compliant which are using text
    mode today.

Bottom line: The decision what to mandate boils down to the question
what implementors prefer.  And, yes, both alternatives are bad
solutions.

Thus, if you are an implementor of PGP/MIME, please subscribe to the
ietf-openpgp mailing list, and let us know what should be done in
your opinion, and why.  Also, please tell us what mode you are using
nowadays, so we get a more precise impression of what software we
are going to break.


Thanks, and kind regards,
-- 
Thomas Roessler			    <roessler@does-not-exist.org>


Received: by above.proper.com (8.9.3/8.9.3) id DAA22413 for ietf-openpgp-bks; Tue, 13 Feb 2001 03:26:30 -0800 (PST)
Received: from smtp2.nikoma.de (smtp2.nikoma.de [212.122.128.25]) by above.proper.com (8.9.3/8.9.3) with ESMTP id DAA22398 for <ietf-openpgp@imc.org>; Tue, 13 Feb 2001 03:26:28 -0800 (PST)
Received: from sobolev.does-not-exist.org (dialin19.pg7-nt.frankfurt.nikoma.de [213.54.38.19]) by smtp2.nikoma.de (8.9.3/8.9.3) with ESMTP id MAA22788; Tue, 13 Feb 2001 12:26:12 +0100 (CET) (envelope-from roessler@does-not-exist.org)
Received: by sobolev.does-not-exist.org (Postfix, from userid 1000) id BA3652ED15; Tue, 13 Feb 2001 12:26:10 +0100 (CET)
Date: Tue, 13 Feb 2001 12:26:10 +0100
From: Thomas Roessler <roessler@does-not-exist.org>
To: dgal@citicom.com
Cc: ietf-openpgp@imc.org
Subject: Re: PGP 7.0 and PGP/MIME?
Message-ID: <20010213122610.D5652@sobolev.does-not-exist.org>
Mail-Followup-To: dgal@citicom.com, ietf-openpgp@imc.org
References: <20010212193824.A1046@sobolev.does-not-exist.org> <200102122234.RAA27032@citicom.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.3.15i
In-Reply-To: <200102122234.RAA27032@citicom.com>; from dgal@pgp.com on Mon, Feb 12, 2001 at 05:34:07PM -0500
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

May I ask what kind of problem this was?

(I mean, the description from comp.mail.mutt - as Derek noted -
really sounds like no PGP/MIME was done at all.)

On 2001-02-12 17:34:07 -0500, Damon Gallaty wrote:
> Reply-To: <dgal@citicom.com>
> From: "Damon Gallaty" <dgal@pgp.com>
> To: <ietf-openpgp@imc.org>
> Subject: RE: PGP 7.0 and PGP/MIME?
> Date: Mon, 12 Feb 2001 17:34:07 -0500
> X-Mailer: Microsoft Outlook 8.5, Build 4.71.2173.0
> 
> There was a problem with PGP/MIME between the Eudora plug-in and Mutt
> specifically, which has been fixed. PGP 7.0.3 should contain this fix.
> 
> - Damon Gallaty
> 
> 
> 
> > -----Original Message-----
> > From: owner-ietf-openpgp@mail.imc.org
> > [mailto:owner-ietf-openpgp@mail.imc.org]On Behalf Of Thomas Roessler
> > Sent: Monday, February 12, 2001 1:38 PM
> > To: ietf-openpgp@imc.org
> > Subject: PGP 7.0 and PGP/MIME?
> >
> >
> > I can't resist from forwarding this.  Is it really true that PGP
> > 7.0's MUA plugins STILL don't get PGP/MIME right?  If so: Why?
> >
> >
> > ----- Forwarded message -----
> > From: <juergen@cavemaus.fiedlerfamily.net>
> > Newsgroups: comp.mail.mutt
> > Subject: Mutt, GnuPG and PGP/Win98
> > Date: Mon, 12 Feb 2001 18:11:10 -0000
> >
> > Hi!
> >
> > I am trying to communicate securely with someone who is using Win98.
> > She is mainly using Eudora with a PGP 7.0.x plugin, I am using mutt
> > 1.2.5 with gnupg 1.0.4.
> > The problem is thus:
> > When I send an encrypted message to her, it appears with an empty
> > body and 2 attachments: One just contains the string 'version 1.0',
> > the second one contains the actual message. Eudora/PGP can't deal
> > with that.
> > When she sends me an encrypted message, it shows up with content
> > type 'text/plain' and the whole encrypted message is in the body.
> > I can decrypt it by pressing the '|' key and then typing 'gpg',
> > but I know that mutt has the potential to automatically recognize
> > encrypted messages; it does it when I send messages to myself. But
> > those come from mutt, of course.
> >
> > Does anyone know what we are doing wrong (besides our choice of
> > operating systems)? Any input would be appreciated.
> >
> > Thanks,
> > j
> >
> >
> > ---- End forwarded message-----
> >
> > --
> > Thomas Roessler			    <roessler@does-not-exist.org>
> >
> 
> 

-- 
Thomas Roessler			    <roessler@does-not-exist.org>


Received: by above.proper.com (8.9.3/8.9.3) id OAA26027 for ietf-openpgp-bks; Mon, 12 Feb 2001 14:34:22 -0800 (PST)
Received: from citicom.com (citicom.com [207.138.160.1]) by above.proper.com (8.9.3/8.9.3) with ESMTP id OAA26023 for <ietf-openpgp@imc.org>; Mon, 12 Feb 2001 14:34:21 -0800 (PST)
Received: from dgal-ws1 (dgal-ws1.cust.citicom.com [207.138.162.226]) by citicom.com (8.9.3/CITICOM-E) with SMTP id RAA27032 for <ietf-openpgp@imc.org>; Mon, 12 Feb 2001 17:34:15 -0500
Message-Id: <200102122234.RAA27032@citicom.com>
Reply-To: <dgal@citicom.com>
From: "Damon Gallaty" <dgal@pgp.com>
To: <ietf-openpgp@imc.org>
Subject: RE: PGP 7.0 and PGP/MIME?
Date: Mon, 12 Feb 2001 17:34:07 -0500
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook 8.5, Build 4.71.2173.0
Importance: Normal
In-Reply-To: <20010212193824.A1046@sobolev.does-not-exist.org>
X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3110.3
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

There was a problem with PGP/MIME between the Eudora plug-in and Mutt
specifically, which has been fixed. PGP 7.0.3 should contain this fix.

- - Damon Gallaty


-----BEGIN PGP SIGNATURE-----
Version: PGP 7.0.3

iQA/AwUBOohkpFb/7csIIkCJEQIA/gCfUc5yDe/2JP0V1thZ2OUIMMxu2CAAoJNm
wlawVAmTgMqr91hBNcT3MrfC
=Tf4Z
-----END PGP SIGNATURE-----

> -----Original Message-----
> From: owner-ietf-openpgp@mail.imc.org
> [mailto:owner-ietf-openpgp@mail.imc.org]On Behalf Of Thomas Roessler
> Sent: Monday, February 12, 2001 1:38 PM
> To: ietf-openpgp@imc.org
> Subject: PGP 7.0 and PGP/MIME?
>
>
> I can't resist from forwarding this.  Is it really true that PGP
> 7.0's MUA plugins STILL don't get PGP/MIME right?  If so: Why?
>
>
> ----- Forwarded message -----
> From: <juergen@cavemaus.fiedlerfamily.net>
> Newsgroups: comp.mail.mutt
> Subject: Mutt, GnuPG and PGP/Win98
> Date: Mon, 12 Feb 2001 18:11:10 -0000
>
> Hi!
>
> I am trying to communicate securely with someone who is using Win98.
> She is mainly using Eudora with a PGP 7.0.x plugin, I am using mutt
> 1.2.5 with gnupg 1.0.4.
> The problem is thus:
> When I send an encrypted message to her, it appears with an empty
> body and 2 attachments: One just contains the string 'version 1.0',
> the second one contains the actual message. Eudora/PGP can't deal
> with that.
> When she sends me an encrypted message, it shows up with content
> type 'text/plain' and the whole encrypted message is in the body.
> I can decrypt it by pressing the '|' key and then typing 'gpg',
> but I know that mutt has the potential to automatically recognize
> encrypted messages; it does it when I send messages to myself. But
> those come from mutt, of course.
>
> Does anyone know what we are doing wrong (besides our choice of
> operating systems)? Any input would be appreciated.
>
> Thanks,
> j
>
>
> ---- End forwarded message-----
>
> --
> Thomas Roessler			    <roessler@does-not-exist.org>
>




Received: by above.proper.com (8.9.3/8.9.3) id NAA23528 for ietf-openpgp-bks; Mon, 12 Feb 2001 13:44:10 -0800 (PST)
Received: from rcn.ihtfp.org (me@ORANGE-TOUR.IHTFP.ORG [204.107.200.33]) by above.proper.com (8.9.3/8.9.3) with ESMTP id NAA23523 for <ietf-openpgp@imc.org>; Mon, 12 Feb 2001 13:44:06 -0800 (PST)
Received: (from warlord@localhost) by rcn.ihtfp.org (8.9.3) id QAA04284; Mon, 12 Feb 2001 16:43:54 -0500
To: Thomas Roessler <roessler@does-not-exist.org>
Cc: ietf-openpgp@imc.org
Subject: Re: PGP 7.0 and PGP/MIME?
References: <20010212193824.A1046@sobolev.does-not-exist.org>
From: Derek Atkins <warlord@mit.edu>
Date: 12 Feb 2001 16:43:54 -0500
In-Reply-To: Thomas Roessler's message of "Mon, 12 Feb 2001 19:38:24 +0100"
Message-ID: <sjm3ddjmvad.fsf@rcn.ihtfp.org>
Lines: 50
X-Mailer: Gnus v5.5/Emacs 20.3
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

This looks like it's not even trying to do PGP/MIME.

-derek

Thomas Roessler <roessler@does-not-exist.org> writes:

> I can't resist from forwarding this.  Is it really true that PGP
> 7.0's MUA plugins STILL don't get PGP/MIME right?  If so: Why? 
> 
> 
> ----- Forwarded message -----
> From: <juergen@cavemaus.fiedlerfamily.net>
> Newsgroups: comp.mail.mutt
> Subject: Mutt, GnuPG and PGP/Win98
> Date: Mon, 12 Feb 2001 18:11:10 -0000
> 
> Hi!
> 
> I am trying to communicate securely with someone who is using Win98.
> She is mainly using Eudora with a PGP 7.0.x plugin, I am using mutt
> 1.2.5 with gnupg 1.0.4. 
> The problem is thus:
> When I send an encrypted message to her, it appears with an empty
> body and 2 attachments: One just contains the string 'version 1.0',
> the second one contains the actual message. Eudora/PGP can't deal
> with that.
> When she sends me an encrypted message, it shows up with content
> type 'text/plain' and the whole encrypted message is in the body.
> I can decrypt it by pressing the '|' key and then typing 'gpg',
> but I know that mutt has the potential to automatically recognize
> encrypted messages; it does it when I send messages to myself. But
> those come from mutt, of course.
> 
> Does anyone know what we are doing wrong (besides our choice of
> operating systems)? Any input would be appreciated.
> 
> Thanks,
> j
> 
> 
> ---- End forwarded message-----
> 
> -- 
> Thomas Roessler			    <roessler@does-not-exist.org>

-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord@MIT.EDU                        PGP key available


Received: by above.proper.com (8.9.3/8.9.3) id LAA15760 for ietf-openpgp-bks; Mon, 12 Feb 2001 11:08:02 -0800 (PST)
Received: from smtp2.nikoma.de (smtp2.nikoma.de [212.122.128.25]) by above.proper.com (8.9.3/8.9.3) with ESMTP id LAA15752 for <ietf-openpgp@imc.org>; Mon, 12 Feb 2001 11:08:00 -0800 (PST)
Received: from sobolev.does-not-exist.org (dialin38.pg5-nt.frankfurt.nikoma.de [213.54.36.38]) by smtp2.nikoma.de (8.9.3/8.9.3) with ESMTP id UAA72320 for <ietf-openpgp@imc.org>; Mon, 12 Feb 2001 20:08:00 +0100 (CET) (envelope-from roessler@does-not-exist.org)
Received: by sobolev.does-not-exist.org (Postfix, from userid 1000) id A42422ED15; Mon, 12 Feb 2001 19:38:24 +0100 (CET)
Date: Mon, 12 Feb 2001 19:38:24 +0100
From: Thomas Roessler <roessler@does-not-exist.org>
To: ietf-openpgp@imc.org
Subject: PGP 7.0 and PGP/MIME?
Message-ID: <20010212193824.A1046@sobolev.does-not-exist.org>
Mail-Followup-To: ietf-openpgp@imc.org
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.3.15i
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by above.proper.com id LAA15755
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

I can't resist from forwarding this.  Is it really true that PGP
7.0's MUA plugins STILL don't get PGP/MIME right?  If so: Why? 


----- Forwarded message -----
From: <juergen@cavemaus.fiedlerfamily.net>
Newsgroups: comp.mail.mutt
Subject: Mutt, GnuPG and PGP/Win98
Date: Mon, 12 Feb 2001 18:11:10 -0000

Hi!

I am trying to communicate securely with someone who is using Win98.
She is mainly using Eudora with a PGP 7.0.x plugin, I am using mutt
1.2.5 with gnupg 1.0.4. 
The problem is thus:
When I send an encrypted message to her, it appears with an empty
body and 2 attachments: One just contains the string 'version 1.0',
the second one contains the actual message. Eudora/PGP can't deal
with that.
When she sends me an encrypted message, it shows up with content
type 'text/plain' and the whole encrypted message is in the body.
I can decrypt it by pressing the '|' key and then typing 'gpg',
but I know that mutt has the potential to automatically recognize
encrypted messages; it does it when I send messages to myself. But
those come from mutt, of course.

Does anyone know what we are doing wrong (besides our choice of
operating systems)? Any input would be appreciated.

Thanks,
j


---- End forwarded message-----

-- 
Thomas Roessler			    <roessler@does-not-exist.org>


Received: by above.proper.com (8.9.3/8.9.3) id DAA17070 for ietf-openpgp-bks; Mon, 12 Feb 2001 03:20:54 -0800 (PST)
Received: from smtp2.nikoma.de (smtp2.nikoma.de [212.122.128.25]) by above.proper.com (8.9.3/8.9.3) with ESMTP id DAA17065 for <ietf-openpgp@imc.org>; Mon, 12 Feb 2001 03:20:52 -0800 (PST)
Received: from sobolev.does-not-exist.org (dialin199.pg12-nt.frankfurt.nikoma.de [213.54.43.199]) by smtp2.nikoma.de (8.9.3/8.9.3) with ESMTP id MAA40131; Mon, 12 Feb 2001 12:20:38 +0100 (CET) (envelope-from roessler@does-not-exist.org)
Received: by sobolev.does-not-exist.org (Postfix, from userid 1000) id C87F52ED15; Mon, 12 Feb 2001 11:42:08 +0100 (CET)
Date: Mon, 12 Feb 2001 11:42:08 +0100
From: Thomas Roessler <roessler@does-not-exist.org>
To: Florian Weimer <Florian.Weimer@RUS.Uni-Stuttgart.DE>
Cc: ietf-openpgp@imc.org, Kazu Yamamoto <kazu@iijlab.net>, warlord@mit.edu
Subject: Re: some requests
Message-ID: <20010212114208.A4238@sobolev.does-not-exist.org>
Mail-Followup-To: Florian Weimer <Florian.Weimer@RUS.Uni-Stuttgart.DE>, ietf-openpgp@imc.org, Kazu Yamamoto <kazu@iijlab.net>, warlord@mit.edu
References: <20010125100145.A4323@sobolev.does-not-exist.org> <tg66ijbtpp.fsf@mercury.rus.uni-stuttgart.de>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.3.14i
In-Reply-To: <tg66ijbtpp.fsf@mercury.rus.uni-stuttgart.de>; from Florian.Weimer@RUS.Uni-Stuttgart.DE on Fri, Feb 09, 2001 at 07:24:18PM +0100
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

On 2001-02-09 19:24:18 +0100, Florian Weimer wrote:

> IMHO, the best solution is to use a new signature type (i.e.
> signature on a MIME part) in RFC 2440bis:

This won't help us, either.  After all, the "new-style" text-mode
signatures are nicely adapted to what we need with PGP/MIME.  The
problem is that we have incompatible text-mode signatures _now_.

-- 
Thomas Roessler			    <roessler@does-not-exist.org>


Received: by above.proper.com (8.9.3/8.9.3) id DAA13500 for ietf-openpgp-bks; Mon, 12 Feb 2001 03:02:30 -0800 (PST)
Received: from kasiski.gnupg.de (porta.u64.de [194.77.88.106]) by above.proper.com (8.9.3/8.9.3) with ESMTP id DAA13488 for <ietf-openpgp@imc.org>; Mon, 12 Feb 2001 03:02:28 -0800 (PST)
Received: from uucp by kasiski.gnupg.de with local-rmail (Exim 3.16 #1 (Debian)) id 14SGwx-0004kD-00; Mon, 12 Feb 2001 12:15:19 +0100
Received: from wk by alberti.gnupg.de with local (Exim 3.12 #1 (Debian)) id 14SGme-0000dS-00; Mon, 12 Feb 2001 12:04:40 +0100
Date: Mon, 12 Feb 2001 12:04:40 +0100
From: Werner Koch <wk@gnupg.org>
To: ietf-openpgp@imc.org
Subject: Re: Finalizing OpenPGP/MIME?
Message-ID: <20010212120440.E1539@alberti.gnupg.de>
Mail-Followup-To: ietf-openpgp@imc.org
References: <20010125135932.L15272@alberti.gnupg.de> <tgae7vbtyb.fsf@mercury.rus.uni-stuttgart.de> <20010212105012.A27199@sobolev.does-not-exist.org> <20010212.191247.74718089.kazu@iijlab.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <20010212.191247.74718089.kazu@iijlab.net>; from kazu@iijlab.net on Mon, Feb 12, 2001 at 07:12:47PM +0900
X-PGP-KeyID: 621CC013
X-PGP-CertKey: A4D9 4E92 B098 6AB5 EE9D  CD75 5DE2 4996 5B03 58A2
X-Request-PGP: finger:wk@porta.u64.de
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

On Mon, 12 Feb 2001, Kazu Yamamoto wrote:

> From: Thomas Roessler <roessler@does-not-exist.org>
> Subject: Re: Finalizing OpenPGP/MIME?
> 
> > Introducing a wildcard value would make one-pass processing
> > impossible, and thus break basic design principles.  I.e., I'd

I would not say impossible but somewhat slower because you have to
hash the digest with all know hash algorithms.  

> Would you explain what "one-pass processing" means in your
> terminology? And tell me which software does provide such a feature

joe@bar$ nc -lp 4711 | mime-processing-pgm | viewer-or-whatever

joe@foo$ nc bar 4711 <large_signed_message

I am not sure whether this is a real life setup.  Sending large
messages MIME encoded is not that effective.   Most software creates
and parses MIME message in memory or uses temporary files.


-- 
Werner Koch                                              <wk@gnupg.org>
GNU Privacy Guard                                (http://www.gnupg.org)
Free Software Foundation Europe              (http://www.fsfeurope.org)
           [Please see X-* mail header for OpenPGP key info]



Received: by above.proper.com (8.9.3/8.9.3) id CAA08873 for ietf-openpgp-bks; Mon, 12 Feb 2001 02:11:38 -0800 (PST)
Received: from mgo.iij.ad.jp (root@mgo.iij.ad.jp [202.232.15.6]) by above.proper.com (8.9.3/8.9.3) with ESMTP id CAA08864 for <ietf-openpgp@imc.org>; Mon, 12 Feb 2001 02:11:36 -0800 (PST)
Received: from ns.iij.ad.jp (root@ns.iij.ad.jp [192.168.2.8]) by mgo.iij.ad.jp (8.8.8/MGO1.0) with ESMTP id TAA02815 for <ietf-openpgp@imc.org>; Mon, 12 Feb 2001 19:11:35 +0900 (JST)
Received: from fs.iij.ad.jp (root@fs.iij.ad.jp [192.168.2.9]) by ns.iij.ad.jp (8.8.5/3.5Wpl7) with ESMTP id TAA29752 for <ietf-openpgp@imc.org>; Mon, 12 Feb 2001 19:11:35 +0900 (JST)
Received: from localhost (mine.iij.ad.jp [192.168.4.209]) by fs.iij.ad.jp (8.8.5/3.5Wpl7) with ESMTP id TAA29128 for <ietf-openpgp@imc.org>; Mon, 12 Feb 2001 19:11:35 +0900 (JST)
Date: Mon, 12 Feb 2001 19:12:47 +0900 (JST)
Message-Id: <20010212.191247.74718089.kazu@iijlab.net>
To: ietf-openpgp@imc.org
Subject: Re: Finalizing OpenPGP/MIME?
From: Kazu Yamamoto (=?iso-2022-jp?B?GyRCOzNLXE9CSScbKEI=?=) <kazu@iijlab.net>
In-Reply-To: <20010212105012.A27199@sobolev.does-not-exist.org>
References: <20010125135932.L15272@alberti.gnupg.de> <tgae7vbtyb.fsf@mercury.rus.uni-stuttgart.de> <20010212105012.A27199@sobolev.does-not-exist.org>
X-Mailer: Mew version 1.95b103 on Emacs 20.7 / Mule 4.1 (AOI)
Mime-Version: 1.0
Content-Type: Text/Plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

From: Thomas Roessler <roessler@does-not-exist.org>
Subject: Re: Finalizing OpenPGP/MIME?

> Introducing a wildcard value would make one-pass processing
> impossible, and thus break basic design principles.  I.e., I'd
> prefer to leave it like it's now.

Would you explain what "one-pass processing" means in your
terminology? And tell me which software does provide such a feature
actually?

--Kazu


Received: by above.proper.com (8.9.3/8.9.3) id BAA06449 for ietf-openpgp-bks; Mon, 12 Feb 2001 01:50:51 -0800 (PST)
Received: from smtp2.nikoma.de (smtp2.nikoma.de [212.122.128.25]) by above.proper.com (8.9.3/8.9.3) with ESMTP id BAA06426 for <ietf-openpgp@imc.org>; Mon, 12 Feb 2001 01:50:39 -0800 (PST)
Received: from sobolev.does-not-exist.org (dialin217.pg5-nt.frankfurt.nikoma.de [213.54.36.217]) by smtp2.nikoma.de (8.9.3/8.9.3) with ESMTP id KAA33694; Mon, 12 Feb 2001 10:50:18 +0100 (CET) (envelope-from roessler@does-not-exist.org)
Received: by sobolev.does-not-exist.org (Postfix, from userid 1000) id 9857A2ED19; Mon, 12 Feb 2001 10:50:12 +0100 (CET)
Date: Mon, 12 Feb 2001 10:50:12 +0100
From: Thomas Roessler <roessler@does-not-exist.org>
To: Florian Weimer <Florian.Weimer@RUS.Uni-Stuttgart.DE>
Cc: ietf-openpgp@imc.org, Werner Koch <wk@gnupg.org>
Subject: Re: Finalizing OpenPGP/MIME?
Message-ID: <20010212105012.A27199@sobolev.does-not-exist.org>
Mail-Followup-To: Florian Weimer <Florian.Weimer@RUS.Uni-Stuttgart.DE>, ietf-openpgp@imc.org, Werner Koch <wk@gnupg.org>
References: <20010125111926.M15272@alberti.gnupg.de> <20010125.201205.28840690.kazu@iijlab.net> <20010125123933.Y15272@alberti.gnupg.de> <20010125.212506.71143274.kazu@iijlab.net> <20010125135932.L15272@alberti.gnupg.de> <tgae7vbtyb.fsf@mercury.rus.uni-stuttgart.de>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.3.14i
In-Reply-To: <tgae7vbtyb.fsf@mercury.rus.uni-stuttgart.de>; from Florian.Weimer@RUS.Uni-Stuttgart.DE on Fri, Feb 09, 2001 at 07:19:08PM +0100
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

On 2001-02-09 19:19:08 +0100, Florian Weimer wrote:

>>> Or if you are suggesting just to set a bogus value to the
>>> micalg parameter because it is meaningless, why don't you
>>> support the idea of wildcard value?

>> I won't object against a wildcard or a new value "unknown"

> What's your opinion, Thomas?

Introducing a wildcard value would make one-pass processing
impossible, and thus break basic design principles.  I.e., I'd
prefer to leave it like it's now.

-- 
Thomas Roessler			    <roessler@does-not-exist.org>


Received: by above.proper.com (8.9.3/8.9.3) id GAA20703 for ietf-openpgp-bks; Sun, 11 Feb 2001 06:27:04 -0800 (PST)
Received: from mercury.rus.uni-stuttgart.de (mercury.rus.uni-stuttgart.de [129.69.1.226]) by above.proper.com (8.9.3/8.9.3) with ESMTP id GAA20698 for <ietf-openpgp@imc.org>; Sun, 11 Feb 2001 06:27:02 -0800 (PST)
Received: from rusfw by mercury.rus.uni-stuttgart.de with local (Exim 3.12 #4) id 14RxL5-0000lE-00 for ietf-openpgp@imc.org; Sun, 11 Feb 2001 15:18:55 +0100
To: ietf-openpgp@imc.org
Subject: Re: some requests
References: <20010126113815.C18321@sobolev.does-not-exist.org> <20010126115714.A21502@sobolev.does-not-exist.org> <tgelx7bu06.fsf@mercury.rus.uni-stuttgart.de> <20010210.115954.71114251.kazu@iijlab.net>
From: Florian Weimer <Florian.Weimer@RUS.Uni-Stuttgart.DE>
Date: 11 Feb 2001 15:18:55 +0100
In-Reply-To: <20010210.115954.71114251.kazu@iijlab.net>
Message-ID: <tgg0hle20g.fsf@mercury.rus.uni-stuttgart.de>
Lines: 31
User-Agent: Gnus/5.0808 (Gnus v5.8.8) Emacs/20.7
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-2022-jp
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

Kazu Yamamoto ($B;3K\OBI'(B) <kazu@iijlab.net> writes:

> From: Florian Weimer <Florian.Weimer@RUS.Uni-Stuttgart.DE>
> Subject: Re: some requests
> 
> > AFAIK, ISO-2022-JP provides such noop characters (and UTF-7 provides
> > an alternative encoding for ASCII characters, with UTF-8, you could
> > use the BOM---which is, unfortunately, not without semantic effect,
> > but that's a Unicode design problem anyway).  This way, one of the
> > main problems which requires mandated Quoted-Printable encoding can be
> > addressed by ISO-2022-JP users, even if they use a 7bit CTE.
> 
> Such encoding is possible. But I think redundant escape sequence is a
> bad idea.

Do you have a better suggestion?  Either the CTE has to take care of
"From " lines, or the charset.  I don't see many options here.

> All in all, the problem of "From " is NOT a PGP/MIME issue, but a
> Multipart/Signed issue (which covers PGP/MIME, S/MIME, MOSS). If
> people want to include such a language, it should go to RFC 1847bis.

Is a revision of RFC 1847 underway?  IMHO, it's better to deal with
these things now and mention them in OpenPGP/MIME (the strictness of
these requirements is perhaps open to debate, but the problems should
be mentioned and a set of possible solutions should be presented).

-- 
Florian Weimer 	                  Florian.Weimer@RUS.Uni-Stuttgart.DE
University of Stuttgart           http://cert.uni-stuttgart.de/
RUS-CERT                          +49-711-685-5973/fax +49-711-685-5898


Received: (from majordomo@localhost) by above.proper.com (8.9.3/8.9.3) id VAA18891 for ietf-openpgp-bks; Fri, 9 Feb 2001 21:23:52 -0800 (PST)
Received: from NEPTUNE.zucotto.com ([216.95.209.154]) by above.proper.com (8.9.3/8.9.3) with ESMTP id VAA18886 for <ietf-openpgp@imc.org>; Fri, 9 Feb 2001 21:23:50 -0800 (PST)
Received: by NEPTUNE.zucotto.com with Internet Mail Service (5.5.2650.21) id <CTQSWKR5>; Sat, 10 Feb 2001 00:23:41 -0500
Message-ID: <FC0292EA4D13D34EA2E5FC728D70A8E3078C2A@NEPTUNE.zucotto.com>
From: Kulwinder Atwal <kulwinder.atwal@zucotto.com>
To: "'rohc@cdt.luth.se'" <rohc@cdt.luth.se>, "'confctrl@isi.edu'" <confctrl@isi.edu>, "'spki@c2.net'" <spki@c2.net>, "'ietf-krb-wg@anl.gov'" <ietf-krb-wg@anl.gov>, "'ietf-openpgp@imc.org'" <ietf-openpgp@imc.org>
Subject: FW: IP over Bluetooth for 50th Meeting of IETF. 
Date: Sat, 10 Feb 2001 00:23:40 -0500
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2650.21)
Content-Type: text/plain; charset="iso-8859-1"
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

-----Original Message-----
From: Kulwinder Atwal 
Sent: Friday, February 09, 2001 7:03 PM
To: 'zeroconf@merit.edu'; seamoby@cdma-2000.org;
MOBILE-IP@STANDARDS.NORTELNETWORKS.COM; 'srvloc@srvloc.org';
'aaa-wg@merit.edu'; 'manet@itd.nrl.navy.mil'; 'ipsec@lists.tislabs.com';
'ipsec-policy@vpnc.org'; 'ietf-ipsra@vpnc.org'; 'ietf-sacred@imc.org';
'enum@ietf.org'; 'sigtran@standards.nortelnetworks.com';
'ietf@ietf.org'; 'IETF-Announce@ietf.org';
'BLUETOOTH-BOF@mailbag.cps.intel.com'
Cc: 'Thomas Narten'; Akers Ron-WRA001
Subject: BOF: IP over Bluetooth for 50th Meeting of IETF. 




Myself and Ron Akers have requested an IP over Bluetooth BOF for the 50th
Meeting of the IETF in Minneapolis.  The BOF will discuss the creation of a
IETF Working Group to investigate the most open and efficient way to place
IP over the Bluetooth Host Controller.

Current work in this area within the Bluetooth SIG concentrates on defining
IP over a set of other lower-layer stacks. Currently there are two options
defined by the Bluetoth SIG:

 Option 1: IP/PPP/RFCOM/L2CAP/Host Controller

 Option 2: IP/PAN Profile/L2CAP/Host Controller
 	   (where the PAN Profile is a Bluetooth SIG work in progress)
 

We are proposing that the IETF form a WG to define a more efficient way of
running IP over Bluetooth. In particular, IP would run
 over an IETF protocol over the Host Controller without L2CAP.  This option
may be adopted by the Bluetooth SIG at a later date as a Profile.  Since all
Bluetooth SIG Profiles are optional, a customer may choose any combination
of Profiles in a final product.  Further, since Bluetooth Working Groups
have it in their mandate to adopt protocols from other standards making
bodies such as the IETF, there exists a clear path for IETF work to be
adopted by the Bluetooth SIG.
 
Whereas the last BOF was informational only and organized by the Bluetooth
SIG itself, the objective of this BOF will be to foster innovation, and
speed progress by placing IP related protocol development within the IETF
and Bluetooth-specific protocol development
 within the Bluetooth SIG, by developing an IP over Bluetooth IETF Working
Group.
 
This effort will define its own way of running IP over Bluetooth, by
carefully selecting a set of Bluetooth protocols (freely available from
published specifications at
http://www.bluetooth.com/developer/specification/specification.asp) on which
to build IP.

Please join myself, Kulwinder Atwal, and Ron Akers on the pre-BOF mailing
list:
 
This site runs version 2.0.1 of the "Mailman" list manager.  
The following describes commands you can send to get
information about, and control your subscription to the lists at
this site. Note that much of the following can also be 
accomplished via the World Wide Web, at:

    http://internet.motlabs.com/mailman/listinfo/bluetooth

In particular, you can use the Web site to have your password sent to
your delivery address.

Email commands can be in the subject line or in the body 
of the message. The commands should be set to the following address:

  <bluetooth-request@internet.motlabs.com>

About the descriptions - words in "<>"s signify REQUIRED items and
words in "[]" denote OPTIONAL items.  Do not include the "<>"s or
"[]"s when you use the commands.

The following commands are valid:

    subscribe [password] [digest-option] [address=<address>]
        Subscribe to the mailing list.  Your password must be given to
        unsubscribe or change your options.  When you subscribe to the
        list, you'll be reminded of your password periodically.
        'digest-option' may be either: 'nodigest' or 'digest' (no
        quotes!)  If you wish to subscribe an address other than the
        address you send this request from, you may specify
        "address=<email address>" (no brackets around the email
        address, no quotes!)

    unsubscribe <password> [address]
        Unsubscribe from the mailing list.  Your password must match
        the one you gave when you subscribed.  If you are trying to
        unsubscribe from a different address than the one you
        subscribed from, you may specify it in the 'address' field.

    who
        See everyone who is on this mailing list.

    info
        View the introductory information for this list.

    lists
        See what mailing lists are run by this Mailman server.

    help
        This message.

    set <option> <on|off> <password> 
        Turn on or off list options.  Valid options are:

        ack:
            Turn this on to receive acknowledgement mail when you send
            mail to the list.

        digest:
            Receive mail from the list bundled together instead of one
            post at a time.

        plain:
            Get plain-text, not MIME-compliant, digests (only if
            digest is set)

        nomail:
            Stop delivering mail.  Useful if you plan on taking a
            short vacation.

        norcv:
            Turn this on to NOT receive posts you send to the list.
            Does not work if digest is set.

        hide:
            Conceals your address when people look at who is on this
            list.


    options
        Show the current values of your list options.

    password <oldpassword> <newpassword> 
        Change your list password.
    
    end or --
       Stop processing commands (good to do if your mailer
       automatically adds a signature file - it'll save you from a lot
       of cruft).


Commands should be sent to bluetooth-request@internet.motlabs.com

Questions and concerns for the attention of a person should be sent to

    bluetooth-admin@internet.motlabs.com



Kulwinder Atwal
Bluetooth Design
Zucotto Wireless Inc.
kulwinder.atwal@zucotto.com

------------------------------------------------------------
Ron Akers                               Voice :(847)576-7928
Networks and Infrastructure Research      FAX :(847)576-3240
Motorola Laboratories           email:ron.akers@motorola.com 
1301 Algonquin Rd, Rm 2246
Schaumburg, IL. 60196
------------------------------------------------------------


Received: by above.proper.com (8.9.3/8.9.3) id SAA17254 for ietf-openpgp-bks; Fri, 9 Feb 2001 18:58:44 -0800 (PST)
Received: from mgo.iij.ad.jp (root@mgo.iij.ad.jp [202.232.15.6]) by above.proper.com (8.9.3/8.9.3) with ESMTP id SAA17250 for <ietf-openpgp@imc.org>; Fri, 9 Feb 2001 18:58:42 -0800 (PST)
Received: from ns.iij.ad.jp (root@ns.iij.ad.jp [192.168.2.8]) by mgo.iij.ad.jp (8.8.8/MGO1.0) with ESMTP id LAA06820 for <ietf-openpgp@imc.org>; Sat, 10 Feb 2001 11:58:47 +0900 (JST)
Received: from fs.iij.ad.jp (root@fs.iij.ad.jp [192.168.2.9]) by ns.iij.ad.jp (8.8.5/3.5Wpl7) with ESMTP id LAA25754 for <ietf-openpgp@imc.org>; Sat, 10 Feb 2001 11:58:46 +0900 (JST)
Received: from localhost (mine.iij.ad.jp [192.168.4.209]) by fs.iij.ad.jp (8.8.5/3.5Wpl7) with ESMTP id LAA01606 for <ietf-openpgp@imc.org>; Sat, 10 Feb 2001 11:58:46 +0900 (JST)
Date: Sat, 10 Feb 2001 11:59:54 +0900 (JST)
Message-Id: <20010210.115954.71114251.kazu@iijlab.net>
To: ietf-openpgp@imc.org
Subject: Re: some requests
From: Kazu Yamamoto (=?iso-2022-jp?B?GyRCOzNLXE9CSScbKEI=?=) <kazu@iijlab.net>
In-Reply-To: <tgelx7bu06.fsf@mercury.rus.uni-stuttgart.de>
References: <20010126113815.C18321@sobolev.does-not-exist.org> <20010126115714.A21502@sobolev.does-not-exist.org> <tgelx7bu06.fsf@mercury.rus.uni-stuttgart.de>
X-Mailer: Mew version 1.95b103 on Emacs 20.7 / Mule 4.1 (AOI)
Mime-Version: 1.0
Content-Type: Text/Plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

From: Florian Weimer <Florian.Weimer@RUS.Uni-Stuttgart.DE>
Subject: Re: some requests

> AFAIK, ISO-2022-JP provides such noop characters (and UTF-7 provides
> an alternative encoding for ASCII characters, with UTF-8, you could
> use the BOM---which is, unfortunately, not without semantic effect,
> but that's a Unicode design problem anyway).  This way, one of the
> main problems which requires mandated Quoted-Printable encoding can be
> addressed by ISO-2022-JP users, even if they use a 7bit CTE.

Such encoding is possible. But I think redundant escape sequence is a
bad idea.

All in all, the problem of "From " is NOT a PGP/MIME issue, but a
Multipart/Signed issue (which covers PGP/MIME, S/MIME, MOSS). If
people want to include such a language, it should go to RFC 1847bis.

--Kazu


Received: by above.proper.com (8.9.3/8.9.3) id KAA24840 for ietf-openpgp-bks; Fri, 9 Feb 2001 10:39:42 -0800 (PST)
Received: from mercury.rus.uni-stuttgart.de (mercury.rus.uni-stuttgart.de [129.69.1.226]) by above.proper.com (8.9.3/8.9.3) with ESMTP id KAA24836 for <ietf-openpgp@imc.org>; Fri, 9 Feb 2001 10:39:40 -0800 (PST)
Received: from rusfw by mercury.rus.uni-stuttgart.de with local (Exim 3.12 #4) id 14RIKe-00032J-00 for ietf-openpgp@imc.org; Fri, 09 Feb 2001 19:31:44 +0100
To: ietf-openpgp@imc.org
Subject: Text-mode signatures
From: Florian Weimer <Florian.Weimer@RUS.Uni-Stuttgart.DE>
Date: 09 Feb 2001 19:31:44 +0100
Message-ID: <tgwvazaesv.fsf@mercury.rus.uni-stuttgart.de>
Lines: 18
User-Agent: Gnus/5.0808 (Gnus v5.8.8) Emacs/20.7
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

>From section 5.2.1 of RFC 2440bis:

   0x01: Signature of a canonical text document.
       This means the signer owns it, created it, or certifies that it
       has not been modified.  The signature is calculated over the
       text data with its line endings converted to <CR><LF> and
       trailing blanks removed.

What does 'line ending' mean in this context?  According to section
3.4, text has to be interpreted in UTF-8.  Which of the line endings
available with UTF-8 shall be converted to <CR><LF>?

What happens to trailing blank lines?

-- 
Florian Weimer 	                  Florian.Weimer@RUS.Uni-Stuttgart.DE
University of Stuttgart           http://cert.uni-stuttgart.de/
RUS-CERT                          +49-711-685-5973/fax +49-711-685-5898


Received: by above.proper.com (8.9.3/8.9.3) id KAA24219 for ietf-openpgp-bks; Fri, 9 Feb 2001 10:32:16 -0800 (PST)
Received: from mercury.rus.uni-stuttgart.de (mercury.rus.uni-stuttgart.de [129.69.1.226]) by above.proper.com (8.9.3/8.9.3) with ESMTP id KAA24215 for <ietf-openpgp@imc.org>; Fri, 9 Feb 2001 10:32:14 -0800 (PST)
Received: from rusfw by mercury.rus.uni-stuttgart.de with local (Exim 3.12 #4) id 14RIDS-00031G-00; Fri, 09 Feb 2001 19:24:18 +0100
To: ietf-openpgp@imc.org
Cc: Kazu Yamamoto <kazu@iijlab.net>, warlord@mit.edu, ietf-openpgp@imc.org, Florian Weimer <Florian.Weimer@RUS.Uni-Stuttgart.DE>
Subject: Re: some requests
References: <20010125100145.A4323@sobolev.does-not-exist.org>
From: Florian Weimer <Florian.Weimer@RUS.Uni-Stuttgart.DE>
Date: 09 Feb 2001 19:24:18 +0100
In-Reply-To: <20010125100145.A4323@sobolev.does-not-exist.org>
Message-ID: <tg66ijbtpp.fsf@mercury.rus.uni-stuttgart.de>
Lines: 26
User-Agent: Gnus/5.0808 (Gnus v5.8.8) Emacs/20.7
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

Thomas Roessler <roessler@does-not-exist.org> writes:

> I suppose that your preferred solution would be to mandate
> binary-mode signatures, so there is no need to give extra protection
> to trailing whitespace.  However, specifying this would mean that
> most current implementations don't conform to the spec, unless I'm
> severely mistaken.  Florian?

IMHO, the best solution is to use a new signature type (i.e. signature
on a MIME part) in RFC 2440bis:

   0x41: Signature of a MIME part.
       This means the signer owns it, created it, or certifies that it
       has not been modified.  The signature is calculated over the
       text data with its line endings[1] converted to <CR><LF> and
       trailing blank characters on each line removed.  Trailing blank
       lines are also removed.

Otherwise, we have to deal with this kind of problems for years.

[1] See comment in the next article.

-- 
Florian Weimer 	                  Florian.Weimer@RUS.Uni-Stuttgart.DE
University of Stuttgart           http://cert.uni-stuttgart.de/
RUS-CERT                          +49-711-685-5973/fax +49-711-685-5898


Received: by above.proper.com (8.9.3/8.9.3) id KAA24008 for ietf-openpgp-bks; Fri, 9 Feb 2001 10:27:06 -0800 (PST)
Received: from mercury.rus.uni-stuttgart.de (mercury.rus.uni-stuttgart.de [129.69.1.226]) by above.proper.com (8.9.3/8.9.3) with ESMTP id KAA24004 for <ietf-openpgp@imc.org>; Fri, 9 Feb 2001 10:27:05 -0800 (PST)
Received: from rusfw by mercury.rus.uni-stuttgart.de with local (Exim 3.12 #4) id 14RI8S-00030N-00; Fri, 09 Feb 2001 19:19:08 +0100
To: ietf-openpgp@imc.org
Cc: Thomas Roessler <roessler@does-not-exist.org>, Werner Koch <wk@gnupg.org>
Subject: Re: Finalizing OpenPGP/MIME?
References: <20010125111926.M15272@alberti.gnupg.de> <20010125.201205.28840690.kazu@iijlab.net> <20010125123933.Y15272@alberti.gnupg.de> <20010125.212506.71143274.kazu@iijlab.net> <20010125135932.L15272@alberti.gnupg.de>
From: Florian Weimer <Florian.Weimer@RUS.Uni-Stuttgart.DE>
Date: 09 Feb 2001 19:19:08 +0100
In-Reply-To: <20010125135932.L15272@alberti.gnupg.de>
Message-ID: <tgae7vbtyb.fsf@mercury.rus.uni-stuttgart.de>
Lines: 14
User-Agent: Gnus/5.0808 (Gnus v5.8.8) Emacs/20.7
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

Werner Koch <wk@gnupg.org> writes:

> > Or if you are suggesting just to set a bogus value to the micalg
> > parameter because it is meaningless, why don't you support the idea of
> > wildcard value?
> 
> I won't object against a wildcard or a new value "unknown"

What's your opinion, Thomas?

-- 
Florian Weimer 	                  Florian.Weimer@RUS.Uni-Stuttgart.DE
University of Stuttgart           http://cert.uni-stuttgart.de/
RUS-CERT                          +49-711-685-5973/fax +49-711-685-5898


Received: by above.proper.com (8.9.3/8.9.3) id KAA23968 for ietf-openpgp-bks; Fri, 9 Feb 2001 10:26:00 -0800 (PST)
Received: from mercury.rus.uni-stuttgart.de (mercury.rus.uni-stuttgart.de [129.69.1.226]) by above.proper.com (8.9.3/8.9.3) with ESMTP id KAA23961 for <ietf-openpgp@imc.org>; Fri, 9 Feb 2001 10:25:58 -0800 (PST)
Received: from rusfw by mercury.rus.uni-stuttgart.de with local (Exim 3.12 #4) id 14RI7N-00030J-00; Fri, 09 Feb 2001 19:18:01 +0100
To: ietf-openpgp@imc.org
Cc: Kazu Yamamoto <kazu@iijlab.net>, ietf-openpgp@imc.org
Subject: Re: some requests
References: <20010125100145.A4323@sobolev.does-not-exist.org> <20010126.161912.74694380.kazu@iijlab.net> <20010126113815.C18321@sobolev.does-not-exist.org> <20010126115714.A21502@sobolev.does-not-exist.org>
From: Florian Weimer <Florian.Weimer@RUS.Uni-Stuttgart.DE>
Date: 09 Feb 2001 19:18:01 +0100
In-Reply-To: <20010126115714.A21502@sobolev.does-not-exist.org>
Message-ID: <tgelx7bu06.fsf@mercury.rus.uni-stuttgart.de>
Lines: 36
User-Agent: Gnus/5.0808 (Gnus v5.8.8) Emacs/20.7
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

Thomas Roessler <roessler@does-not-exist.org> writes:

>   Note: If any line begins with the string "From", it is strongly
>   suggested that either the Quoted-Printable or Base64 MIME encoding
>   be applied.  If Quoted-Printable is used, at least one of the
>   characters in the string should be encoded using the hexadecimal
>   coding rule.  This is because many mail transfer and delivery
>   agents treat "From " (the word "from" followed immediately by a
>   space character) as the start of a new message and thus insert a
>   right angle-bracket (>) in front of any line beginning with "From"
>   to distinguish this case, invalidating the signature.

Perhaps you can add the following text?

  If neither the Quoted-Printable nor Base64 MIME encoding is used,
  and the charset provides alternative encodings of ASCII characters,
  at least one characters in the string "From " shall be encoded in
  such a way.  Alternatively, if the charset provides (control)
  characters without visible or semantic effect, such characters shall
  be used to make the ASCII representation of the beginning of the
  line distinct from "From ".

AFAIK, ISO-2022-JP provides such noop characters (and UTF-7 provides
an alternative encoding for ASCII characters, with UTF-8, you could
use the BOM---which is, unfortunately, not without semantic effect,
but that's a Unicode design problem anyway).  This way, one of the
main problems which requires mandated Quoted-Printable encoding can be
addressed by ISO-2022-JP users, even if they use a 7bit CTE.

BTW: I've recently seen a line starting with "from " which was
mangled.  Your text does not indicate if 

-- 
Florian Weimer 	                  Florian.Weimer@RUS.Uni-Stuttgart.DE
University of Stuttgart           http://cert.uni-stuttgart.de/
RUS-CERT                          +49-711-685-5973/fax +49-711-685-5898


Received: by above.proper.com (8.9.3/8.9.3) id EAA01256 for ietf-openpgp-bks; Fri, 9 Feb 2001 04:24:19 -0800 (PST)
Received: from ietf.org (odin.ietf.org [132.151.1.176]) by above.proper.com (8.9.3/8.9.3) with ESMTP id EAA01251 for <ietf-openpgp@imc.org>; Fri, 9 Feb 2001 04:24:17 -0800 (PST)
Received: from CNRI.Reston.VA.US (localhost [127.0.0.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id HAA13839; Fri, 9 Feb 2001 07:24:20 -0500 (EST)
Message-Id: <200102091224.HAA13839@ietf.org>
Mime-Version: 1.0
Content-Type: Multipart/Mixed; Boundary="NextPart"
To: IETF-Announce: ;
Cc: ietf-openpgp@imc.org
From: Internet-Drafts@ietf.org
Reply-to: Internet-Drafts@ietf.org
Subject: I-D ACTION:draft-ietf-openpgp-mime-04.txt
Date: Fri, 09 Feb 2001 07:24:20 -0500
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

--NextPart

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the An Open Specification for Pretty Good Privacy Working Group of the IETF.

	Title		: MIME Security with OpenPGP
	Author(s)	: M. Elkins, D. Del Torto, R. Levien, T. Roessler
	Filename	: draft-ietf-openpgp-mime-04.txt
	Pages		: 12
	Date		: 08-Feb-01
	
This document describes how the OpenPGP Message Format [1] can be
used to provide privacy and authentication using the Multipurpose
Internet Mail Extensions (MIME) security content types described in
RFC1847 [2].
This draft is being discussed on the 'ietf-openpgp' mailing list.  To
join the list, send a message to <ietf-openpgp-request@imc.org> with
the single word 'subscribe' in the subject.  An archive of the
working group's list is located at <http://www.imc.org/ietf-openpgp>.

A URL for this Internet-Draft is:
http://www.ietf.org/internet-drafts/draft-ietf-openpgp-mime-04.txt

Internet-Drafts are also available by anonymous FTP. Login with the username
"anonymous" and a password of your e-mail address. After logging in,
type "cd internet-drafts" and then
	"get draft-ietf-openpgp-mime-04.txt".

A list of Internet-Drafts directories can be found in
http://www.ietf.org/shadow.html 
or ftp://ftp.ietf.org/ietf/1shadow-sites.txt


Internet-Drafts can also be obtained by e-mail.

Send a message to:
	mailserv@ietf.org.
In the body type:
	"FILE /internet-drafts/draft-ietf-openpgp-mime-04.txt".
	
NOTE:	The mail server at ietf.org can return the document in
	MIME-encoded form by using the "mpack" utility.  To use this
	feature, insert the command "ENCODING mime" before the "FILE"
	command.  To decode the response(s), you will need "munpack" or
	a MIME-compliant mail reader.  Different MIME-compliant mail readers
	exhibit different behavior, especially when dealing with
	"multipart" MIME messages (i.e. documents which have been split
	up into multiple messages), so check your local documentation on
	how to manipulate these messages.
		
		
Below is the data which will enable a MIME compliant mail reader
implementation to automatically retrieve the ASCII version of the
Internet-Draft.

--NextPart
Content-Type: Multipart/Alternative; Boundary="OtherAccess"

--OtherAccess
Content-Type: Message/External-body;
	access-type="mail-server";
	server="mailserv@ietf.org"

Content-Type: text/plain
Content-ID:	<20010208135948.I-D@ietf.org>

ENCODING mime
FILE /internet-drafts/draft-ietf-openpgp-mime-04.txt

--OtherAccess
Content-Type: Message/External-body;
	name="draft-ietf-openpgp-mime-04.txt";
	site="ftp.ietf.org";
	access-type="anon-ftp";
	directory="internet-drafts"

Content-Type: text/plain
Content-ID:	<20010208135948.I-D@ietf.org>

--OtherAccess--

--NextPart--




Received: by ns.secondary.com (8.9.3/8.9.3) id WAA23493 for ietf-openpgp-bks; Wed, 7 Feb 2001 22:00:08 -0800 (PST)
Received: from smtprelay1.adelphia.net (smtprelay1.adelphia.net [64.8.25.6]) by ns.secondary.com (8.9.3/8.9.3) with ESMTP id WAA23489 for <ietf-openpgp@imc.org>; Wed, 7 Feb 2001 22:00:07 -0800 (PST)
Received: from mwyoung ([24.48.233.14]) by smtprelay1.adelphia.net (Netscape Messaging Server 4.15) with SMTP id G8FCXU00.L6Y; Thu, 8 Feb 2001 01:05:54 -0500 
Message-ID: <00a801c09195$5f89e0c0$c23fa8c0@transarc.ibm.com>
From: "Michael Young" <mwy-pgpu89@the-youngs.org>
To: <pgp-users@cryptorights.org>, <ietf-openpgp@imc.org>
References: <200102080110.BAA01994@konan.nsict.org>
Subject: Re: [PGP-USERS] Limited utility of master/subkey
Date: Thu, 8 Feb 2001 01:06:39 -0500
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

-----BEGIN PGP SIGNED MESSAGE-----

Clive Jones wrote:
> I don't think what you're trying to do is a good idea.

I appreciate your concerns, but I do not share your conclusions.

The care I take with a key and its passphrase *is* related to its
value, which is in turn related to its lifetime.  I may use a simpler
passphrase for a key that deals with short-term messages than ones
that guard other personal data or that signs other keys.  I also
attach a shorter expiration time to those less valuable keys.
I also believe that the more a key is used, the greater chance
of a compromise to due malice *or accident*.
         
The ability to generate new subkeys seems to match my model.
If my subkey were always as valuable as my master key, why would
I ever generate another subkey?

If the keys have different values, why is it unreasonable to
allow different passphrases?  No, it's not the only (or even
best) way to mitigate risk, but I believe it can help.

You suggest:

> Isn't it far simpler just to make a separate key-signing key, rather
> than looking for a way to do this with subkeys? This is certainly a
> method a lot of people have used for years.

I am doing just that.  The *only* reason that it is simpler is that
the tools have this limitation.  This requires that human beings
recognize that these keys are related (or grant my key-signing key
greater trust than otherwise necessary).

When PGP moved to DSA/DH, this could have been the solution: simply
have two independent keys.  That would have been just as unwieldy.
The master/subkey approach recognizes the utility in the tools
understanding a relationship between the keys.  That utility does not
depend on the keys having equal value -- in fact, it suggests the
opposite -- nor does it depend on them having the same passphrase.

I'm not suggesting that the tools shouldn't make it easy for someone
to use the same passphrase for all the related keys -- clearly that
suits most people's needs.  I'm simply suggesting that they should
allow for more advanced use.  And certainly, when faced with
an imported OpenPGP-compliant master/subkey group with different
passphrases, it ought to behave reasonably.

And for what it's worth, GNUPG does behave.  (Thanks, Werner :-).
PGP6 does not.  I can't buy a personal PGP7 yet (or see source),
so for it, I can't say.

-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Privacy 6.5.3

iQEVAwUBOoI3ZWNDnIII+QUHAQFBjQf6A10ScY8GV9m6QiIg2pWQw450rJI2h4KN
wmbt5qi+sGnSttzk+kUroY+FKc2yfp1kmgW9Ru1RVIyUo7EU6gZEDc7MbQIt1vZE
i2sxtk8E/0dPyYF2hamlAqAMAkRocHiYrbAWHfVAKQRfYKlNVGrOnHnlrlcdjz/Y
d3zB6UxaJMReKk3tW+lsavd6ORtiaQDe7e0FZpoy+xsQwjmr3ZeuqY3BZt+74XOF
RzpqVwNh5E1pKKMFwRtvLNfYkY6guwICGmpnp2/s67VFEUKxVoeioRBDywg6Ibd3
ZYZZY0E0mZRQLwrL2zWB0dL5J4cxSbqTCf3QwSBTUspYfIMflMVs0w==
=zYrC
-----END PGP SIGNATURE-----




Received: by ns.secondary.com (8.9.3/8.9.3) id RAA18168 for ietf-openpgp-bks; Wed, 7 Feb 2001 17:09:07 -0800 (PST)
Received: from konan.nsict.org (clive@[193.133.200.135]) by ns.secondary.com (8.9.3/8.9.3) with SMTP id RAA18164 for <ietf-openpgp@imc.org>; Wed, 7 Feb 2001 17:09:03 -0800 (PST)
Received: (from clive@localhost) by konan.nsict.org (sendmail/nsict) id BAA01994; Thu, 8 Feb 2001 01:10:59 GMT
Date: Thu, 8 Feb 2001 01:10:59 GMT
Message-Id: <200102080110.BAA01994@konan.nsict.org>
From: clive@nsict.org (Clive Jones)
Organization: National Society for the Inversion of Cuddly Tigers
To: pgp-users@cryptorights.org, ietf-openpgp@imc.org
In-reply-to: "Michael Young"'s message of Wed, 7 Feb 2001 00:51:32 -0500 <004201c090ca$06938aa0$c23fa8c0@transarc.ibm.com>
Subject: [PGP-USERS] Limited utility of master/subkey
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

"Michael Young" <mwy-pgpu89@the-youngs.org> wrote:
> Does PGP7 or GnuPG provide the ability to use a separate
> passphrase for the master key and its subkeys?  I'd like to
> use my master key rarely, for key-signing only, and protect
> it with a passphrase that I almost never use.  I'd then use
> (limited-lifetime) subkeys for everyday decryption.
> Ideally, I'd be able to make a subkey for everyday signing
> of messages.
[...]
> Any thoughts?

I don't think what you're trying to do is a good idea.

The basic premise is that you want to keep your key-signing key more
secure than your everyday decryption and message-signing keys. You
propose to do this by giving your key-signing key a different
passphrase - presumably one that is more secure?

You are naturally remembering passphrases rather than writing them
down, since you care about security so much. Since you can remember
the more secure passphrase, why not enjoy greater security by using
that passphrase for everything, rather than using a weaker passphrase
for the other parts?

- It means there are two passphrases to crack not just one.
    Not true. Anyone who obtains your key-signing key and determines
    its passphrase gains the authority to replace your message-signing
    and decryption keys, which is almost as useful to them anyway.
- It means that if your everyday passphrase is captured by a keyboard
  sniffer, your key-signing passphrase is still safe.
    True. On the other hand, you are still presumably going to use
    your key-signing passphrase on occasion, and your computer will be
    no more secure against sniffing when you do; anyone who is able to
    capture passphrases you type will probably get both.
- The everyday passphrase can be easier to type.
    True - just about the only thing I can see in favour of the
    scheme.

Remember that, of the passphrase and the secret key, the passphrase is
the weaker element of your protection from impersonation. If you are
taking extra precautions with your key-signing key, you should
seriously consider keeping it on a floppy or similar, rather than
leaving it on your PC - this is a much more significant improvement in
security than using a different passphrase.

If you're going to keep your key-signing secret key offline, you want
to be able to split apart the different secret subkeys of a key, too.

Isn't it far simpler just to make a separate key-signing key, rather
than looking for a way to do this with subkeys? This is certainly a
method a lot of people have used for years.

--Clive.


Received: by ns.secondary.com (8.9.3/8.9.3) id FAA09526 for ietf-openpgp-bks; Wed, 7 Feb 2001 05:43:12 -0800 (PST)
Received: from kasiski.gnupg.de (porta.u64.de [194.77.88.106]) by ns.secondary.com (8.9.3/8.9.3) with ESMTP id FAA09521 for <ietf-openpgp@imc.org>; Wed, 7 Feb 2001 05:43:09 -0800 (PST)
Received: from (alberti.gnupg.de) [192.168.123.3]  by kasiski.gnupg.de with esmtp (Exim 3.16 #1 (Debian)) id 14QVAo-0005Oa-00; Wed, 07 Feb 2001 15:02:18 +0100
Received: from wk by alberti.gnupg.de with local (Exim 3.12 #1 (Debian)) id 14QV2q-0006fq-00; Wed, 07 Feb 2001 14:54:04 +0100
Date: Wed, 7 Feb 2001 14:54:04 +0100
From: Werner Koch <wk@gnupg.org>
To: ietf-openpgp@imc.org
Subject: Re: Limited utility of master/subkey
Message-ID: <20010207145404.G25510@alberti.gnupg.de>
Mail-Followup-To: ietf-openpgp@imc.org
References: <004201c090ca$06938aa0$c23fa8c0@transarc.ibm.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <004201c090ca$06938aa0$c23fa8c0@transarc.ibm.com>; from mwy-pgpu89@the-youngs.org on Wed, Feb 07, 2001 at 12:51:32AM -0500
X-PGP-KeyID: 621CC013
X-PGP-CertKey: A4D9 4E92 B098 6AB5 EE9D  CD75 5DE2 4996 5B03 58A2
X-Request-PGP: finger:wk@porta.u64.de
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

On Wed, 7 Feb 2001, Michael Young wrote:

> Does PGP7 or GnuPG provide the ability to use a separate
> passphrase for the master key and its subkeys?  I'd like to

GnuPG in part.  If the subkey's passphrase is different it will ask
you for this passphrase.  However, it is not possible to set a
different passphrase for a subkey.

There is a hack which allows you to create a secret key without a
usable primary key:  grep the FAQ for --export-secret-subkeys

> is possible.  I also see no way to generate a signing subkey.
> Yes, I can create a completely separate key-signing key,

You can do this with GnuPG, but there are probably some problems
using this sign-only subkey: currently GnuPG favors the primary key
for this.  This will be changed soon.

Ciao,

  Werner 

-- 
Werner Koch                                              <wk@gnupg.org>
GNU Privacy Guard                                (http://www.gnupg.org)
Free Software Foundation Europe              (http://www.fsfeurope.org)
           [Please see X-* mail header for OpenPGP key info]


Received: by ns.secondary.com (8.9.3/8.9.3) id WAA22717 for ietf-openpgp-bks; Tue, 6 Feb 2001 22:14:23 -0800 (PST)
Received: from smtprelay3.adelphia.net (smtprelay3.adelphia.net [64.8.25.8]) by ns.secondary.com (8.9.3/8.9.3) with ESMTP id WAA22713 for <ietf-openpgp@imc.org>; Tue, 6 Feb 2001 22:14:21 -0800 (PST)
Received: from mwyoung ([24.48.233.14]) by smtprelay3.adelphia.net (Netscape Messaging Server 4.15) with SMTP id G8DHK200.FXU; Wed, 7 Feb 2001 00:50:26 -0500 
Message-ID: <004201c090ca$06938aa0$c23fa8c0@transarc.ibm.com>
From: "Michael Young" <mwy-pgpu89@the-youngs.org>
To: <pgp-users@cryptorights.org>
Cc: <ietf-openpgp@imc.org>
Subject: Limited utility of master/subkey
Date: Wed, 7 Feb 2001 00:51:32 -0500
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

-----BEGIN PGP SIGNED MESSAGE-----

Does PGP7 or GnuPG provide the ability to use a separate
passphrase for the master key and its subkeys?  I'd like to
use my master key rarely, for key-signing only, and protect
it with a passphrase that I almost never use.  I'd then use
(limited-lifetime) subkeys for everyday decryption.
Ideally, I'd be able to make a subkey for everyday signing
of messages.  The OpenPGP specification would appear to
allow this, but I don't see any commands for doing so in the
implementations.

As an experiment, I generated such a master/subkey set and
imported it into PGP 6.5.3.  I found that it couldn't decrypt
material encrypted to the encryption subkey.  I then tried
the passphrase-changing dialog, and it (quite reasonably)
complained about "the" passphrase being incorrect, but it
did change the master's passphrase.  Even though I had
changed the passphrases to match, I was unable decrypt until
I went through the passphrase-changing dialog yet again.

So, unless I'm missing something, it doesn't look like this
is possible.  I also see no way to generate a signing subkey.
Yes, I can create a completely separate key-signing key,
but this gives up the values of the master/subkey (notably,
being able to accumulate signatures on master/userId
relationships that automatically apply to all subkeys).
The very limited coupling available in the implementations
just doesn't buy very much.

Any thoughts?

-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Privacy 6.5.3

iQEVAwUBOoDiPGNDnIII+QUHAQFlvwf9EJHKflFzMzzKjEbh+K1raI5SdDYbVgXX
wDYxr3U6KxvDADXcsKVuKBqcaZoLBJe0zYipBcskdE9PQ1ApOrCnOSfF4UZCE7SZ
HvrQf54BQKcLYrWyrgF2eR5HJCCGold6ppDx0vlTMnJt73nfpA85+9inHDe6Ovx9
EmNo05+Tmy0E8UEA9w9BkA5fpovtxnY+GTi7O94CvxO9VRy6/5uiE24cX8Sp5Fof
+7ouBuMVUj4IIRgmvosGL5hpv3J4HethG6H6mTjWFZ7DtOFPGf42tbwrYIcJ8rzk
vNSM/0TpaihfSJN1XS9V1A1KkCMB8eEkfLs6HlB+ebHUvXuGcMAEtA==
=DmBj
-----END PGP SIGNATURE-----




Received: by ns.secondary.com (8.9.3/8.9.3) id SAA19437 for ietf-openpgp-bks; Tue, 6 Feb 2001 18:52:22 -0800 (PST)
Received: from finney.org (226-132.adsl2.netlojix.net [207.71.226.132]) by ns.secondary.com (8.9.3/8.9.3) with ESMTP id SAA19432 for <ietf-openpgp@imc.org>; Tue, 6 Feb 2001 18:52:21 -0800 (PST)
From: hal@finney.org
Received: (from hal@localhost) by finney.org (8.9.3/8.9.3) id SAA27032; Tue, 6 Feb 2001 18:58:26 -0800
Date: Tue, 6 Feb 2001 18:58:26 -0800
Message-Id: <200102070258.SAA27032@finney.org>
To: Florian.Weimer@RUS.Uni-Stuttgart.DE, joe.tag@juno.com
Subject: Re: Rijndael in PGP???
Cc: ietf-openpgp@imc.org
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

Yes, both the commercial version, PGP 7 from Network Associates, and
the free GPG (GNU Privacy Guard) already incorporate Rijndael.

Hal Finney


> Hello. I am interested in the subject, because 
> I believe that both CAST-256 and Rijndael support
> 128 bit Plaintext/Ciphertext I/O, and 
> because CAST was already incorporated into PGP 5.0+. 
> I am on "the learning curve" and I apprecciate your
> assistance.  Is there a "real development" effort 
> being done to incorporate Rijndael into PGP? 
> Let me know, please.  It's a project I may want 
> to work on locally, in New Jersey, USA. 


Received: by ns.secondary.com (8.9.3/8.9.3) id SAA18798 for ietf-openpgp-bks; Tue, 6 Feb 2001 18:19:16 -0800 (PST)
Received: from m11.jersey.juno.com (m11.jersey.juno.com [64.136.16.74]) by ns.secondary.com (8.9.3/8.9.3) with ESMTP id SAA18794 for <ietf-openpgp@imc.org>; Tue, 6 Feb 2001 18:19:15 -0800 (PST)
Received: from cookie.juno.com by cookie.juno.com for <"xS5dSbQuAOKnbKF9wbUrHBb/BqBlfkfaV0Id376Y2vSZuURxz8r/Sg==">
Received: (from joe.tag@juno.com) by m11.jersey.juno.com (queuemail) id FVM2J4F2; Tue, 06 Feb 2001 21:25:40 EST
To: Florian.Weimer@RUS.Uni-Stuttgart.DE
Cc: ietf-openpgp@imc.org
Date: Tue, 6 Feb 2001 16:05:51 EST
Subject: Re: Rijndael in PGP???
Message-ID: <20010206.161356.4799.0.joe.tag@juno.com>
References: <20010205.143941.4799.0.joe.tag@juno.com> <tg4ry7vi99.fsf@mercury.rus.uni-stuttgart.de>
X-Mailer: Juno 1.49
X-Juno-Line-Breaks: 0-17,19-36
From: "J. G. Tag,Jr." <joe.tag@juno.com>
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

=== Feb. 6, 2001; 21:17 EST === 

Hello. I am interested in the subject, because 
I believe that both CAST-256 and Rijndael support
128 bit Plaintext/Ciphertext I/O, and 
because CAST was already incorporated into PGP 5.0+. 
I am on "the learning curve" and I apprecciate your
assistance.  Is there a "real development" effort 
being done to incorporate Rijndael into PGP? 
Let me know, please.  It's a project I may want 
to work on locally, in New Jersey, USA. 

Best regards. 

    Joe Tag,Jr. 

----- reply separator ----- 

On 06 Feb 2001 18:22:26 +0100 Florian Weimer
<Florian.Weimer@RUS.Uni-Stuttgart.DE> writes:
>Jon Callas <jon@callas.org> writes:
>
>> Yes, RFC 2440 already has specification in it for the AES, which is 
>the
>> same thing as Rijndael.
>
>At the moment, AES and Rijndael are different things.  Of course, it's
>unlikely that AES will become an entirely different algorithm, but
>AFAIK, the official AES specification has not yet been released (so
>changes in detail are still possible).
>
>-- 
>Florian Weimer 	                  
>Florian.Weimer@RUS.Uni-Stuttgart.DE
>University of Stuttgart           http://cert.uni-stuttgart.de/
>RUS-CERT                          +49-711-685-5973/fax 
>+49-711-685-5898

________________________________________________________________
GET INTERNET ACCESS FROM JUNO!
Juno offers FREE or PREMIUM Internet access for less!
Join Juno today!  For your FREE software, visit:
http://dl.www.juno.com/get/tagj.


Received: by ns.secondary.com (8.9.3/8.9.3) id JAA21667 for ietf-openpgp-bks; Tue, 6 Feb 2001 09:23:16 -0800 (PST)
Received: from mercury.rus.uni-stuttgart.de (mercury.rus.uni-stuttgart.de [129.69.1.226]) by ns.secondary.com (8.9.3/8.9.3) with ESMTP id JAA21662 for <ietf-openpgp@imc.org>; Tue, 6 Feb 2001 09:23:11 -0800 (PST)
Received: from rusfw by mercury.rus.uni-stuttgart.de with local (Exim 3.12 #4) id 14QBow-0003ZU-00 for ietf-openpgp@imc.org; Tue, 06 Feb 2001 18:22:26 +0100
To: ietf-openpgp@imc.org
Subject: Re: Rijndael in PGP???
References: <20010205.143941.4799.0.joe.tag@juno.com> <p04320401b6a4fed86218@[172.20.1.38]>
From: Florian Weimer <Florian.Weimer@RUS.Uni-Stuttgart.DE>
Date: 06 Feb 2001 18:22:26 +0100
In-Reply-To: <p04320401b6a4fed86218@[172.20.1.38]>
Message-ID: <tg4ry7vi99.fsf@mercury.rus.uni-stuttgart.de>
Lines: 14
User-Agent: Gnus/5.0808 (Gnus v5.8.8) Emacs/20.7
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

Jon Callas <jon@callas.org> writes:

> Yes, RFC 2440 already has specification in it for the AES, which is the
> same thing as Rijndael.

At the moment, AES and Rijndael are different things.  Of course, it's
unlikely that AES will become an entirely different algorithm, but
AFAIK, the official AES specification has not yet been released (so
changes in detail are still possible).

-- 
Florian Weimer 	                  Florian.Weimer@RUS.Uni-Stuttgart.DE
University of Stuttgart           http://cert.uni-stuttgart.de/
RUS-CERT                          +49-711-685-5973/fax +49-711-685-5898


Received: by ns.secondary.com (8.9.3/8.9.3) id RAA11012 for ietf-openpgp-bks; Mon, 5 Feb 2001 17:01:17 -0800 (PST)
Received: from natasha.sj.counterpane.com (natasha.sj.counterpane.com [63.196.29.130]) by ns.secondary.com (8.9.3/8.9.3) with ESMTP id RAA11008 for <ietf-openpgp@imc.org>; Mon, 5 Feb 2001 17:01:16 -0800 (PST)
Received: from natasha.sj.counterpane.com (root@localhost) by natasha.sj.counterpane.com with ESMTP id RAA02440; Mon, 5 Feb 2001 17:08:27 -0800 (PST)
Received: from [172.20.1.38] (eris.sj.counterpane.com [172.20.1.38]) by natasha.sj.counterpane.com with ESMTP id RAA02436; Mon, 5 Feb 2001 17:08:26 -0800 (PST)
Mime-Version: 1.0
X-Sender: jon@63.73.97.162
Message-Id: <p04320401b6a4fed86218@[172.20.1.38]>
In-Reply-To: <20010205.143941.4799.0.joe.tag@juno.com>
References: <20010205.143941.4799.0.joe.tag@juno.com>
Date: Mon, 5 Feb 2001 17:08:18 -0800
To: "J. G. Tag,Jr." <joe.tag@juno.com>, ietf-openpgp@imc.org
From: Jon Callas <jon@callas.org>
Subject: Re: Rijndael in PGP???
Content-Type: text/plain; charset="us-ascii"
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

At 2:39 PM -0500 2/5/01, J. G. Tag,Jr. wrote:
>Hello.  Forgive the question, I don't know
>whom else to ask.
>
>Is there anyone doing work to incorporate Rijndael
>into PGP, to replace Rijndael with TripleDES (DES-EDE) ???
>

Yes, RFC 2440 already has specification in it for the AES, which is the
same thing as Rijndael.

	Jon



Received: by ns.secondary.com (8.9.3/8.9.3) id PAA08399 for ietf-openpgp-bks; Mon, 5 Feb 2001 15:44:28 -0800 (PST)
Received: from m11.jersey.juno.com (m11.jersey.juno.com [64.136.16.74]) by ns.secondary.com (8.9.3/8.9.3) with ESMTP id PAA08393 for <ietf-openpgp@imc.org>; Mon, 5 Feb 2001 15:44:27 -0800 (PST)
Received: from cookie.juno.com by cookie.juno.com for <"xS5dSbQuAOKnbKF9wbUrHOxK9MFGP5NREcIV1d5kzZxmGOCpYqVnBA==">
Received: (from joe.tag@juno.com) by m11.jersey.juno.com (queuemail) id FVJ7CFKW; Mon, 05 Feb 2001 18:51:41 EST
To: ietf-openpgp@imc.org
Date: Mon, 5 Feb 2001 14:39:28 EST
Subject: Rijndael in PGP??? 
Message-ID: <20010205.143941.4799.0.joe.tag@juno.com>
X-Mailer: Juno 1.49
X-Juno-Line-Breaks: 0-9
From: "J. G. Tag,Jr." <joe.tag@juno.com>
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

Hello.  Forgive the question, I don't know 
whom else to ask. 

Is there anyone doing work to incorporate Rijndael
into PGP, to replace Rijndael with TripleDES (DES-EDE) ???

Thanks. 

>>> Joe Tag 


________________________________________________________________
GET INTERNET ACCESS FROM JUNO!
Juno offers FREE or PREMIUM Internet access for less!
Join Juno today!  For your FREE software, visit:
http://dl.www.juno.com/get/tagj.


Received: by ns.secondary.com (8.9.3/8.9.3) id GAA08847 for ietf-openpgp-bks; Mon, 5 Feb 2001 06:45:50 -0800 (PST)
Received: from mail.kiban.co.jp (ns1.kiban.co.jp [210.232.195.50]) by ns.secondary.com (8.9.3/8.9.3) with SMTP id GAA08841 for <ietf-openpgp@imc.org>; Mon, 5 Feb 2001 06:45:48 -0800 (PST)
From: b4h443@arabia.com
Received: from ns.mobiletel.net [63.46.223.184] by mail.kiban.co.jp (SMTPD32-4.07) id ACD22552007A; Mon, 05 Feb 2001 23:50:42 +0900
Message-ID: <0000712d5714$00000ac0$00003444@kate.ccohs.ca>
To: <lxtltpq0t7dtgjf5d@telmex.net.mx>
Subject: Brand New E-Mail pager for FR-EE!
Date: Mon, 05 Feb 2001 08:50:36 -0600
X-Priority: 3
X-MSMail-Priority: Normal
Reply-To: b4h443@arabia.com
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

Brand New E-Mail pager for FREE!

   No long term contract
   No activation fee
   No big prepayment of airtime
   No credit check

   PAGING AMERICA is going to give you absolutely Free the Brand new Motorola
   Accessmate E-Mail display pager. This is the top of the line PCS technology
   pager made today. This side viewable display pager has a retail value of
   $189.00and comes with its own e-mail address so you can receive your e-mails
   as well as alpha-numeric and numeric messages instantly where ever you are.
   Your new e-mail pager has features like 50,000 character memory, message time
   stamping, automatic garbled message correction, beeps or vibrates,
   incandescent backlight, saved message folder, a unique never out of range
   feature that allows your pager to retrieve messages sent earlier when your
   pager was out of range or turned completely off. You can also receive
   weather, news and sports .The Motorola e-mail pager is very small and uses
   only a single double A battery. All we ask before we ship you your Free pager
   is for you to allow us to provide the airtime for you. There is no long term
   contract or credit check. Airtime is month to month and can be cancelled at
   any time. This pager will comes pre-programmed with its own e-mail address as
   well as a local telephone number to receive numeric pages. This pager comes
   with a complete 30 day money back guarantee, if after receiving this pager
   you're not completely happy, send it back and receive a full refund.

   For immediate delivery call Paging America at toll free at 877-699-8545
















Brand New E-Mail pager for FREE!


