docs/master
changeset 177:3d7db5c7965d
Finished the section on signing and encryption.
author | markus schnalke <meillo@marmaro.de> |
---|---|
date | Tue, 10 Jul 2012 22:28:10 +0200 |
parents | 25d05add0d97 |
children | 520b3c7abba1 |
files | discussion.roff |
diffstat | 1 files changed, 56 insertions(+), 56 deletions(-) [+] |
line diff
1.1 --- a/discussion.roff Tue Jul 10 18:48:32 2012 +0200 1.2 +++ b/discussion.roff Tue Jul 10 22:28:10 2012 +0200 1.3 @@ -2361,99 +2361,99 @@ 1.4 .[ 1.5 neil rickert mhsign mhpgp 1.6 .] 1.7 -were included into mmh. 1.8 -The scripts fit well into the mmh, because they are lightweight and 1.9 -of style similar to the existing tools. 1.10 +were included into mmh 1.11 +.Ci f45cdc98117a84f071759462c7ae212f4bc5ab2e 1.12 +.Ci 58cf09aa36e9f7f352a127158bbf1c5678bc6ed8 . 1.13 +The scripts fit well because they are lightweight and 1.14 +similar of style to the existing tools. 1.15 Additionally, no licensing difficulties appeared, 1.16 as they are part of the public domain. 1.17 .P 1.18 -The scripts were written for nmh, hence I needed to adjust them according 1.19 -to the differences of mmh. 1.20 -For instance, I removed the use of the backup prefix and dropped support 1.21 -for old PGP features. 1.22 -.P 1.23 .Pn mhsign 1.24 handles the signing and encrypting part. 1.25 It comprises about 250 lines of shell code and interfaces between 1.26 .Pn gnupg 1.27 and 1.28 the MH system. 1.29 -It was meant to be invoked at the WhatNow prompt, but in mmh, 1.30 +It was meant to be invoked manually at the WhatNow prompt, but in mmh, 1.31 .Pn send 1.32 -does the job automatically. 1.33 -Special header fields were introduced to request the action. 1.34 +invokes 1.35 +.pn mhsign 1.36 +automatically 1.37 +.Ci c7b5e1df086bcc37ff40163ee67571f076cf6683 . 1.38 +Special header fields were introduced to request this action. 1.39 If a draft contains the 1.40 .Hd Sign 1.41 header field, 1.42 .Pn send 1.43 -will sign it. 1.44 -The key to be used is either chosen automatically or specified by the 1.45 +will initiate the signing. 1.46 +The signing key is either chosen automatically or specified by the 1.47 .Pe Pgpkey 1.48 profile entry. 1.49 .Pn send 1.50 -always signes messages using the PGP/MIME standard, \" REF XXX 1.51 +always create signatures using the PGP/MIME standard, \" REF XXX 1.52 but by manually invoking 1.53 .Pn mhsign , 1.54 old-style non-MIME signatures can be created as well. 1.55 -To sign an outgoing message, the draft needs to contain a 1.56 +To encrypt an outgoing message, the draft needs to contain an 1.57 .Hd Enc 1.58 header field. 1.59 -Public keys of all recipients are taken from the gnupg keyring or 1.60 -from an overrides files, called 1.61 -.Fn pgpkeys . 1.62 +Public keys of all recipients are searched for in the gnupg keyring and 1.63 +in a file called 1.64 +.Fn pgpkeys , 1.65 +which contains exceptions and overrides. 1.66 Unless public keys are found for all recipients, 1.67 -.Pn send 1.68 -will refuse to encrypt and send it. 1.69 +.Pn mhsign 1.70 +will refuse to encrypt it. 1.71 Currently, messages with hidden (BCC) recipients can not be encrypted. 1.72 This work is pending because it requires a structurally more complex 1.73 approach. 1.74 .P 1.75 +.Pn mhpgp 1.76 +is the companion to 1.77 +.Pn mhsign . 1.78 +It verifies signatures and decrypts messages. 1.79 +Encrypted messages can either be temporarily decrypted for display 1.80 +or permanently decrypted and stored into the current folder. 1.81 +Currently, 1.82 +.Pn mhpgp 1.83 +needs to be invoked manually. 1.84 +The integration into 1.85 +.Pn show 1.86 +and 1.87 +.Pn mhstore 1.88 +to verify signatures and decrypt messages as needs 1.89 +is planned but not realized yet. 1.90 +.P 1.91 +Both scripts were written for nmh, hence they needed to be adjust 1.92 +according to the differences between nmh and mmh. 1.93 +For instance, they use the backup prefix no longer. 1.94 +Further more, compatibility support for old PGP features was dropped. 1.95 +.P 1.96 The integrated message signing and encrypting support is one of the 1.97 most recent features in mmh. 1.98 -Feedback from users and the experience I will gather myself 1.99 -will direct the further development of the facility. 1.100 -It is worthwhile to consider adding 1.101 +It has not yet had the time to mature. 1.102 +User feedback and personal experience need to be accumulated to 1.103 +direct the further development of the facility. 1.104 +Although the feedback and experience is still missing, 1.105 +it seems to be worthwhile to consider adding 1.106 .Sw -[no]sign 1.107 and 1.108 .Sw -[no]enc 1.109 switches to 1.110 .Pn send , 1.111 -to override the corresponding header fields. 1.112 -The profile entry: 1.113 +to be able to override the corresponding header fields. 1.114 +A profile entry: 1.115 .VS 1.116 send: -sign 1.117 VE 1.118 -.LP 1.119 -would then activate signing of all outgoing messages. 1.120 -With the present approach, the line 1.121 -.VS 1.122 -Send: 1.123 -VE 1.124 -.LP 1.125 -needs to be added to all message forms to achieve the same result. 1.126 -Yet, the integration of 1.127 -.Pn mhsign 1.128 -into mmh is too recent to have enough experience to decide this 1.129 -question now. 1.130 -.P 1.131 -.Pn mhpgp 1.132 -is the contrary part to 1.133 -.Pn mhsign . 1.134 -It verifies signatures and decrypts messages. 1.135 -.P 1.136 -FIXME: Add it to mmh first, then write about it here. 1.137 -.P 1.138 -The integration of 1.139 -.Pn mhpgp 1.140 -into 1.141 -.Pn show , 1.142 -to automatically verify signatures and decrypt messages as needed, 1.143 -is a task left open. 1.144 -.Pn show 's 1.145 -current structure does not allow such an integration on basis of 1.146 -the existing code. 1.147 -Extensive programming work is required. ... FIXME 1.148 - 1.149 +would then activate signing for all outgoing messages. 1.150 +With the present approach, a 1.151 +.Hd Send 1.152 +header component needs to be added to each draft template 1.153 +to achieve the same result. 1.154 +Adding the switches would ease the work greatly and keep the 1.155 +template files clean. 1.156 1.157 1.158