OpenPGP data in the CERT RR

[Simon Josefsson]

"John A. Martin" <jam at jamux.com> writes:

>>>>>> "Simon" == Simon Josefsson
>>>>>> "OpenPGP data in the CERT RR"
>>>>>>  Mon, 05 Aug 2002 17:46:40 +0200
>
>     Simon> 2.2 E-mail Based RR Owner Name
>
>     Simon>    .... where the
>     Simon>    client is expected to have the e-mail address (extracted
>     Simon>    from the From: header).  Thus the OpenPGP data should be
>     Simon>    published under the standard translation of the e-mail
>     Simon>    address(es) used in the RFC 2822 envelope of OpenPGP
>     Simon>    messages.
>
> 1. The distinction or connection between header From: and the envelope
>    ("envelope sender" taken from the SMTP MAIL command?) seems unclear
>    or confusing.

I used "envelope" loosely to mean the RFC 2822 headers, but I agree
the term "envelope" is confusing, I'll try to reword it.

> 2. Is it wise to use either header-sender or envelope-sender
>    information?  They often differ and are both subject to being
>    rewritten between the the originating sender and the ultimate
>    receiver.

Header-sender ("From:") shouldn't be rewritten, I think, and is a
suitable guess.  SMTP envelope sender is pretty useless, yes.

Thanks for your comments.