[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kmail-devel
Subject:    Re: PGP 2 support
From:       Ingo =?iso-8859-1?q?Kl=F6cker?= <ingo.kloecker () epost ! de>
Date:       2001-10-30 22:55:43
[Download RAW message or body]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tuesday 30 October 2001 13:06, Werner Koch wrote:
> On Mon, 29 Oct 2001 23:09:02 +0100, Ingo Klöcker said:
> > BTW, GnuPG doesn't fully support OpenPGP.
> >
> >     * (9.2) states that IDEA SHOULD be implemented.  This is not
> > done due to patent problems.
>
> Please read rfc2119:
>
>  3. SHOULD   This word, or the adjective "RECOMMENDED", mean that
> there may exist valid reasons in particular circumstances to ignore a
> particular item, but the full implications must be understood and
> carefully weighed before choosing a different course.
>
> There are no RFCs on the standard track which require a patented
> algorithm.  This is an IETF policy and therefore a pretty good reason
> not to implement it.

Oops. Sorry. So you have a SHOULD (which you ignored for good reasons) 
and we have a SHOULD (which we ignored because of lack of time and 
implementation difficulties).

> > This means that if we didn't support PGP 5/6 we really wouldn't be
> > able to claim to support OpenPGP. But as we do...
>
> Nonsense. PGP 5 and 6 are far away from OpenPGP compliance and even
> PGP 7 has a couple of problems.

I know. We get quite a lot of bug reports about non working secret keys 
which are caused by PGP's way of not storing non-ASCII user ids in 
UTF-8.

> Regarding PGP/MIME: From rfc2440:
>
>    Note that many applications, particularly messaging applications,
>    will want more advanced features as described in the OpenPGP-MIME
>    document, RFC 2015. An application that implements OpenPGP for
>    messaging SHOULD implement OpenPGP-MIME.
>
> Yet another SHOULD.  So what did you "carefully weighed before
> choosing a different course" than OpenPGP-MIME ;-)

We didn't "carefully weigh..." anything. ;-)
I guess simple clearsigning and inline encryption was much easier to 
implement. OpenPGP-MIME support was always postponed (until now).

Regards,
Ingo
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE73y/vGnR+RTDgudgRAgOSAKCsCT0yzkPxxzsEISb9C2ySW0hq0gCeL4Xm
p8/iCDYGJQADMq/9+ncB+yk=
=iBoV
-----END PGP SIGNATURE-----
_______________________________________________
kmail Developers mailing list
kmail@mail.kde.org
http://mail.kde.org/mailman/listinfo/kmail

[prev in list] [next in list] [prev in thread] [next in thread]