On Wednesday 19 January 2011, Werner Koch wrote: > Hi! > > I'd like to see a feature in MUAs to wrap the entire mail as > presented in the composer into a message/rfc822 container and send > the actual message out with the same headers as in the rfc822 > container. This allows to sign the entire mail including the > headers. On the receiving site the MUA should figure out that the > signed headers match the actual ones and visually indicate the > message including the header as signed.
"figure out that the signed headers match the actual ones" may sound easy, but it's actually an extremely tough task. Any mailing list mangling the Reply-to header will break the signature. Any MTA, virus checker, etc. beautifying or otherwise changing the existing headers will break the signature. There would need to be some canonical format for headers. But that's magnitudes harder than converting the body of an email message to the canonical text format. Still, it sounds like a neat idea. > This is fully MIME compliant > and should not break any MIME aware mailer (except for those only > claiming to support MIME). True. But those messages will look ugly in most mailers (even in those that are fully MIME compliant). In particular, web mailers will most likely not be able to view them properly. Not that any serious email user would care about them. :-) Regards, Ingo
signature.asc
Description: This is a digitally signed message part.
_______________________________________________ Gnupg-users mailing list [email protected] http://lists.gnupg.org/mailman/listinfo/gnupg-users
