Signing Mails with OpenPGP like DKIM

Daniel Kahn Gillmor dkg at fifthhorseman.net
Fri Sep 6 16:00:09 CEST 2024


On Fri 2024-09-06 14:00:53 +0200, Werner Koch wrote:
> See 
> GpgOL: Add filenames for PGP/MIME parts
> https://dev.gnupg.org/T4258
>
> on how to solve that.  Complaints about strange attachments dropped to
> nearly zero after we deployed that change 5 years ago.

This is a great idea, and certainly an improvement over an unnamed MIME
part.  That said, i suspect you have a more technical userbase than the
pool of people i correspond with.

Receiving an uninterpretable attachment named
"openpgp-digital-signature.asc" or "smime.p7s" would get me responses
like "what's an .asc file?" or "I don't know how to open a .p7s file!"
or "what does openpgp-digital-signature have to do with [subject of
message]?"

The less visible the signature is for people who can't use it, the
better.

           --dkg
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 324 bytes
Desc: not available
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20240906/3bf0979e/attachment-0001.sig>


More information about the Gnupg-users mailing list