From: David Edmondson <dme@dme.org>
To: Daniel Kahn Gillmor <dkg@fifthhorseman.net>,
notmuch <notmuch@notmuchmail.org>
Subject: Re: a proposed change to JSON output to report verification of PGP/MIME signatures.
Date: Mon, 15 Nov 2010 10:23:53 +0000 [thread overview]
Message-ID: <871v6mzxza.fsf@ut.hh.sledj.net> (raw)
In-Reply-To: <4CDE4486.2050101@fifthhorseman.net>
On Sat, 13 Nov 2010 02:55:50 -0500, Daniel Kahn Gillmor <dkg@fifthhorseman.net> wrote:
> It would end up like this (without the --verify flag):
>
> ---------------------------
> "body": [
> {
> "content": "here is a test message i signed on 2010-11-11.\n\n
> --dkg\n\n",
> "content-type": "text/plain",
> "id": 1,
> "signedby": [ 2 ]
> },
> {
> "content-type": "application/pgp-signature",
> "filename": "signature.asc",
> "id": 2,
> "signs": [ 1 ],
> "sigstatus": [ {
> "verified": "unknown"
> } ]
> }
> ],
> ---------------------------
I think that this should become:
"body": [
{
"content-type": "multipart/signed",
"id": 1,
"content": [
{
"content": "here is a test message i signed on 2010-11-11.\n\n --dkg\n\n",
"content-type": "text/plain",
"id": 2,
"signedby": [ 3 ],
},
{
"content-type": "application/pgp-signature",
"filename": "signature.asc",
"id": 3,
"signs": [ 2 ],
"sigstatus": [ {
"verified": "unknown"
} ]
}
]
}
],
i.e. the existence of the multipart/signed wrapper should be
explicit. In general, all MIME parts should be visible. Your email would
end up output something like
http://dme.org/emacs/notmuch.multipart/thread.json
(well, that's the thread, but you can see your message as the first in
the thread).
We'd render that as shown in:
http://dme.org/emacs/notmuch.multipart/screenshot.png
(the indentation of the parts there is optional - in this case it helps
a lot to show the structure).
The JSON output and the rendering are from a previous prototype (branch
'mp3' of https://github.com/dme/notmuch).
> and here it is with the --verify flag:
This would change in a similar manner (only the
application/pgp-signature part would change).
Changing the JSON output in this way would not materially affect your
proposal, I believe. There'd be some implicit changes in the output (for
example, if a signature signs a multipart/mixed part your proposal would
list it as signing the sub-parts of the multipart/mixed, but with my
additional changes it should be listed as signing the multipart/mixed
itself).
dme.
--
David Edmondson, http://dme.org
next prev parent reply other threads:[~2010-11-15 10:26 UTC|newest]
Thread overview: 12+ messages / expand[flat|nested] mbox.gz Atom feed top
2010-11-13 7:55 a proposed change to JSON output to report verification of PGP/MIME signatures Daniel Kahn Gillmor
2010-11-13 11:40 ` David Bremner
2010-11-13 16:00 ` Daniel Kahn Gillmor
2010-11-15 10:23 ` David Edmondson [this message]
2010-11-15 16:40 ` Daniel Kahn Gillmor
2010-11-16 19:47 ` Carl Worth
2010-11-16 20:06 ` Daniel Kahn Gillmor
2010-11-24 1:08 ` Daniel Kahn Gillmor
2010-11-16 20:10 ` Jameson Rollins
2010-11-16 20:22 ` Daniel Kahn Gillmor
2010-11-16 20:44 ` Jameson Rollins
2010-11-16 20:51 ` Daniel Kahn Gillmor
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
List information: https://notmuchmail.org/
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=871v6mzxza.fsf@ut.hh.sledj.net \
--to=dme@dme.org \
--cc=dkg@fifthhorseman.net \
--cc=notmuch@notmuchmail.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this public inbox
https://yhetil.org/notmuch.git/
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).