Making the case for smart cards for the average user

[MFPA]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi


On Tuesday 7 April 2015 at 2:14:55 PM, in
<mid:87y4m43ws0.fsf at alice.fifthhorseman.net>, Daniel Kahn Gillmor
wrote:


> On Tue 2015-04-07 08:39:57 -0400, MFPA wrote:
>> I was talking about what happens when the angle brackets are not
>> there.

>> If I generate a key with the UID of:-

>>    Test20150407 user at example.com

>> and try to encrypt an email to user at example.com it
>> fails.

> The above is neither an RFC 5322 addr-spec nor an RFC
> 5322 name-addr. That is, it would not be considered
> acceptable in the To: line of an e-mail header:

>   https://tools.ietf.org/html/rfc5322#section-3.4

> We could invent arbitrary ways to structure a User ID
> that includes an e-mail address, but writing code to
> extract the e-mail address from these things seems like
> a lot of heuristics at best, and there are all kinds of
> ways that it could fail.

> We know how to structure a proper name-addr and an
> addr-spec, and it's not difficult.  If you want an
> e-mail address to be recognizable to automated tools,
> you should structure it in a recognizable way.

> The above UID is simply a mistake, and i don't think
> GnuPG should try to accomodate it.

Fair enough. That we should try to accommodate:-

     user at example.com

but not:-

    Test20150407 user at example.com

actually makes sense to me. I structured my example UID incorrectly.


- --
Best regards

MFPA                  <mailto:2014-667rhzu3dc-lists-groups at riseup.net>

Dogs look up to us. Cats look down on us. Pigs treat us as equals.
-----BEGIN PGP SIGNATURE-----
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=
=IHCo
-----END PGP SIGNATURE-----