unofficial mirror of notmuch@notmuchmail.org
 help / color / mirror / code / Atom feed
* revision 2: easing access to the cryptographic envelope
@ 2019-05-20  3:22 Daniel Kahn Gillmor
  2019-05-20  3:22 ` [PATCH v2 1/4] util/crypto: _notmuch_message_crypto: tracks message-wide crypto state Daniel Kahn Gillmor
                   ` (3 more replies)
  0 siblings, 4 replies; 12+ messages in thread
From: Daniel Kahn Gillmor @ 2019-05-20  3:22 UTC (permalink / raw)
  To: Notmuch Mail

This is the second revision of the series originally posted at
id:20190424183113.29242-1-dkg@fifthhorseman.net

(that series no longer applies directly to master due to all the
cleanup that has been merged recently)

This series is an important baseline for my work on protected headers,
which i aim to start posting for review on this list soon, but can be
seen meanwhile on the protected-headers branch at
https://gitlab.com/dkg/notmuch.

------

E-mail structures are potentially arbitrarily complicated.
Cryptographic protection standards like S/MIME and OpenPGP or PGP/MIME
are often applicable to some elements of some messages.

Last year's "E-Fail" attacks made it clear that trying to provide
normal users with cryptographic protections on piecemeal parts of an
e-mail message is a recipe for disaster, both from an implementation
perspective and a user experience perspective.

I've argued in more detail at [0] about the need to treat
cryptographic protections at the message level, rather than at the
subpart level.

[0] https://dkg.fifthhorseman.net/blog/e-mail-cryptography.html

This series makes "notmuch show" track and emit message-wide
cryptographic state, providing an interface that simple clients that
use "notmuch show" can rely on for their UI and UX.

It doesn't yet apply this layer to the emacs interface, because at the
moment many users of the emacs interface are nerds who are as likely
to understand the intricacies of MIME structure as anyone, and for the
moment, just augmenting the notmuch show schemata in a sensible way is
enough of a chunk to bite off.

 (though i'd be happy to review and support the use of this
 per-message cryptographic state in notmuch-emacs if/when this lands!)

I'd appreciate any review and feedback!

Regards,

        --dkg

^ permalink raw reply	[flat|nested] 12+ messages in thread

end of thread, other threads:[~2019-05-25  1:36 UTC | newest]

Thread overview: 12+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2019-05-20  3:22 revision 2: easing access to the cryptographic envelope Daniel Kahn Gillmor
2019-05-20  3:22 ` [PATCH v2 1/4] util/crypto: _notmuch_message_crypto: tracks message-wide crypto state Daniel Kahn Gillmor
2019-05-22 12:18   ` David Bremner
2019-05-24 21:15     ` Daniel Kahn Gillmor
2019-05-25  1:34       ` David Bremner
2019-05-20  3:22 ` [PATCH v2 2/4] cli: expose message-wide crypto status from mime-node Daniel Kahn Gillmor
2019-05-20  3:22 ` [PATCH v2 3/4] mime-node: track whole-message crypto state while walking the tree Daniel Kahn Gillmor
2019-05-20  3:22 ` [PATCH v2 4/4] cli/show: emit new whole-message crypto status output Daniel Kahn Gillmor
2019-05-23 10:50   ` David Bremner
2019-05-24 20:09     ` Daniel Kahn Gillmor
2019-05-24 22:41       ` Daniel Kahn Gillmor
2019-05-25  1:36         ` David Bremner

Code repositories for project(s) associated with this public inbox

	https://yhetil.org/notmuch.git/

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).