On Wed, 10 Jul 2002 22:30:11 +0200 (Romance Daylight Time) Vadim Zeitlin 
<[EMAIL PROTECTED]> wrote:

> On Sun, 7 Jul 2002 21:57:44 +0200 (CEST) Thomas Finneid
> <[EMAIL PROTECTED]> wrote:

> TF> - storage of messages
> TF>         I think its better narrow it down and say that only the
> TF>         composer/viewer should do the encryption/decryption at run
> time.
> 
>  I agree.

ditto.

> TF> - mime implications
> TF>         I donīt know exactly how this works yet, 

>  Me neither. Have you found which documents describe this?

MIME and PGP are described in RFC 2015, 3156

S/MIME v2 is described in RFC 2311, 2312
S/MIME v3 is described in RFC 2632, 2633, 2634

there are 5 others that show up if you go to
http://www.rfc-editor.org/rfcsearch.html and search on "S/MIME", but
they're of less relevance.

the two books i mentioned on mahogany-users a couple of weeks back also
have some discussion of things like certificate handling for S/MIME and
don't address PGP/GPG at all..
 
>  And I've never used it at all, so a description would indeed be welcome.
> TIA!

the gist of it is that if the keys/certificates are available or can be
fetched, the message is decoded automagically. this is not overwhelmingly
difficult, i think, but we do have to develop a key/certificate handler.
 
>  I propose to start with implementing support for viewing
> encrypted/signed
> messages. It is probably simpler and, AFAIK, indepent of composing them.
> And we'll probably gain some experience while doing it, i.e. some "small"
> issues such as integrating with the external libraries and such will be
> solved in process of implementing it.

for S/MIME, look at apps/smime.c in the OpenSSL source distribution. you'll
find examples of how to call OpenSSL for all the S/MIME stuff. hopefully 
there is a similar example of how to do this in the GPG distribution.

richard
--
Richard Welty                                         [EMAIL PROTECTED]
Averill Park Networking                                         518-573-7592
              Unix, Linux, IP Network Engineering, Security




-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Two, two, TWO treats in one.
http://thinkgeek.com/sf
_______________________________________________
Mahogany-Developers mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/mahogany-developers

Reply via email to