Discussion of RFC 2822 ()

Keith Moore | 25 Jul 05:10

draft-moore-auto-email-response-01


After over a year's delay, I've finally revised my recommendations for
automatic email responders.  I just sent them to the internet-draft
folks (in both text and PDF for the ASCII-impaired).   Or you can get
the preprint at any of:

http://www.cs.utk.edu/~moore/I-D/draft-moore-auto-email-response-01.txt
http://www.cs.utk.edu/~moore/I-D/draft-moore-auto-email-response-01.ps
http://www.cs.utk.edu/~moore/I-D/draft-moore-auto-email-response-01.pdf

I've tried to address the comments that were made when the -00 version
came out (well, those I didn't totally disagree with :), but the changes
are too numerous for me to summarize at this point.

Keith

headers

Simon Josefsson | 31 Jul 19:42

Re: Format=Flowed/RFC 2646 Bis (-01)


Something that came up here, which could be useful to discuss in the
security consideration: OpenPGP says that trailing white space on an
article is ignored when computing digest on a cleartext signed
message.  This means that someone can add, in transit, a format=flowed
header to a (regular, non-flowed) vanilla PGP (not PGP/MIME) signed
message and introduce arbitrary trailing SPC characters without being
detected.  This change the rendering of the article, if the client
support format=flowed, possibly even in a malicious way.

Consider someone sending:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

My favorite letters, ordered by priority (letters on the same line
are of the same priority):
A Q
C
L O
X
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.3.2-cvs (GNU/Linux)

iQC1AwUBPylPae2iHpS1ZXFvAQJExwT+JPl/+MCgjggqab0I7E3E964S6+FijyGI
NT0n9WD1hWYB9TYyQAtzDA4AIHhvcMu0QJaiPb/DNDE0RP+n/5rESU8wt+BoDo33
h1pEzvCtPL/QFW5fRBqaJO9KXsrqofMym+xoYZrtAMzttPWb8OxjpWSYfd5TnGKM
qpYGI8YKWfGonDx2ed7Aa9GbX3Tx8EOd5mGTAciJit23m6NQtG9MfQ==
=gRko
-----END PGP SIGNATURE-----

(Continue reading)


Mon	Tue	Wed	Thu	Fri	Sat	Sun
	1	2	3	4	5	6
7	8	9	10	11	12	13
14	15	16	17	18	19	20
21	22	23	24	25	26	27
28	29	30	31

Mon

Tue

Wed

Thu

Fri

Sat

Sun

1	January 2012
4	December 2011
27	April 2011
2	December 2010
9	November 2010
2	October 2010
21	September 2010
7	April 2010
1	July 2009
1	March 2009
2	November 2008
8	October 2008
37	September 2008
10	August 2008
154	July 2008
1	June 2008
7	May 2008
4	April 2008
16	March 2008
17	February 2008
129	January 2008
26	December 2007
25	November 2007
16	October 2007
4	September 2007
21	August 2007
25	July 2007
50	May 2007
15	April 2007
3	March 2007
4	February 2007
2	January 2007
3	November 2006
2	October 2006
10	September 2006
4	August 2006
8	July 2006
13	March 2006
1	February 2006
2	January 2006
6	December 2005
6	November 2005
7	October 2005
49	July 2005
74	June 2005
123	May 2005
12	April 2005
99	March 2005
104	February 2005
85	January 2005
122	December 2004
118	November 2004
289	October 2004
329	September 2004
273	August 2004
62	July 2004
1	June 2004
16	May 2004
20	April 2004
13	March 2004
80	February 2004
201	January 2004
33	December 2003
40	November 2003
177	October 2003
56	September 2003
32	August 2003
2	July 2003
36	June 2003
16	May 2003
6	April 2003
61	March 2003
280	February 2003
427	January 2003
58	December 2002
56	November 2002
83	October 2002
26	September 2002
95	August 2002
11	July 2002
176	June 2002
235	May 2002
126	April 2002
69	March 2002
240	February 2002
24	January 2002
23	December 2001
31	November 2001
43	October 2001
48	September 2001
10	August 2001
1	July 2001
25	June 2001
114	May 2001
12	April 2001
3	March 2001
19	February 2001
41	January 2001
16	December 2000
15	November 2000
17	October 2000
8	September 2000
2	August 2000
8	July 2000
14	June 2000
15	May 2000
6	April 2000
137	March 2000
2	November 1999
16	October 1999
11	September 1999
22	July 1999
2	June 1999
11	May 1999
13	April 1999
93	March 1999
88	February 1999
50	January 1999
8	December 1998
29	November 1998
50	October 1998
65	September 1998
81	August 1998
3	July 1998
4	May 1998
4	April 1998
82	March 1998
39	February 1998
6	October 1997
75	August 1997
82	July 1997
12	June 1997
2	April 1997
1	March 1997
3	February 1997
1	January 1997
1	December 1996
3	November 1996
6	September 1996
33	August 1996
14	July 1996
8	June 1996
10	May 1996
2	April 1996
11	March 1996
29	February 1996
6	January 1996
21	December 1995
47	November 1995
14	October 1995
1	September 1995
17	August 1995
55	July 1995
46	June 1995
83	May 1995
36	April 1995
23	March 1995
109	February 1995
138	January 1995
187	December 1994
208	November 1994
210	October 1994
100	September 1994
55	August 1994
45	July 1994
23	June 1994
57	May 1994
2	April 1994
18	March 1994
10	February 1994
34	January 1994
52	December 1993
159	November 1993
112	October 1993
141	September 1993
86	August 1993
16	July 1993
104	June 1993
78	May 1993
126	April 1993
324	March 1993
205	February 1993
165	January 1993
96	December 1992
17	November 1992
16	October 1992
13	September 1992
34	August 1992
55	July 1992
57	June 1992
30	May 1992
94	April 1992
201	March 1992
212	February 1992
103	January 1992
186	December 1991
150	November 1991
384	October 1991
293	September 1991
98	August 1991
88	July 1991
136	June 1991
111	May 1991
209	April 1991