Re: Header protection / memoryhole [was: Re: Header encryption / memoryhole]

[Varac <varac@leap.se>]

[-- Attachment #1: Type: text/plain, Size: 1642 bytes --]

Hi Daniel,

Thanks for clarifying!

Greetings, Varac


Quoting Daniel Kahn Gillmor (2018-04-08 23:18:34)
> On Mon 2018-04-02 18:58:28 +0200, Varac wrote:
> 
> > I'd like to know the state of header encryption support for
> > notmuch (aka memoryhole) [1].
> 
> "memoryhole" refers to "protected headers", not just encrypted headers.
> That is, the headers can be protected both by cryptographic signature
> *and* by encryption.  This is a subtlety, but probably worth getting
> right as we work on documentation and implementations.
> 
> This is on my list of things to work on for notmuch, but i'd be happy if
> someone else beat me to it.  clearly i've taken too long to get this
> done.
> 
> fwiw, memory-hole messages do display successfully in all versions of
> notmuch i'm aware of, but they do so by rendering the "force-display"
> part.  so notmuch currently uses the fallback arrangements as explicitly
> intended by the original memoryhole draft.
> 
> as i see it, the steps are (in order):
> 
>  * handle encrypted subject correctly during message display time if the
>    message is being decrypted.
>  
>  * handle encrypted subject specifically during message decryption at
>    indexing time, storing it the correct subject field, instead of
>    storing the "outside" subject.
> 
>  * suppress display of any "force-display" part during message display
>    time.
> 
>  * handle any other cryptographically-protected headers during display
>    and indexing.
> 
>  * generate protected headers when encrypting mail.
> 
> 
> i welcome help with any of these steps :)
> 
>   --dkg

[-- Attachment #2: signature --]
[-- Type: application/pgp-signature, Size: 801 bytes --]

-----BEGIN PGP SIGNATURE-----
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=8eXr
-----END PGP SIGNATURE-----