The IESG has approved the following document: - 'Guidance on End-to-End E-mail Security' (draft-ietf-lamps-e2e-mail-guidance-16.txt) as Informational RFC
This document is the product of the Limited Additional Mechanisms for PKIX and SMIME Working Group. The IESG contact persons are Paul Wouters and Roman Danyliw. A URL of this Internet-Draft is: https://datatracker.ietf.org/doc/draft-ietf-lamps-e2e-mail-guidance/ Technical Summary End-to-end cryptographic protections for e-mail messages can provide useful security. However, the standards for providing cryptographic protection are extremely flexible. That flexibility can trap users and cause surprising failures. This document offers guidance for mail user agent implementers to help mitigate those risks, and to make end-to-end e-mail simple and secure for the end user. It provides a useful set of vocabulary as well as recommendations to avoid common failures. It also identifies a number of currently unsolved usability and interoperability problems. Working Group Summary There is support in the LAMPS WG for this document. It was developed over the last three years, with discussion at almost every IETF meeting during that time period. Document Quality There has been some code written, but so far, vendors of major email user agents have not said whether they will implement. One did offer insightful review of the Internet-Draft during WG Last Call. Personnel The Document Shepherd for this document is Russ Housley. The Responsible Area Director is Roman Danyliw. _______________________________________________ IETF-Announce mailing list [email protected] https://www.ietf.org/mailman/listinfo/ietf-announce
