ietf-smime
[Top] [All Lists]

RE: Question about signing attachments separately

1998-01-28 14:59:36
It may also be worth noting, that prior to V3's inclusion of receipts, that 
some existing receipt implementations (i.e. based on Message Disposition 
Notification, and EDIINTs implementation thereof) are message level.

Regards,
-------------------------------------------
Karen Rosenthal
Premenos, a Harbinger Corporation
1000 Burnett Ave
Concord, CA  94520

Email:  karenr(_at_)sfo(_dot_)harbinger(_dot_)com
Tel#:   1-510-688-2928
Fax#:   1-510-602-2133
Visit:  http://www.harbinger.com

-----Original Message-----
From:   Jim Schaad (Exchange) 
[SMTP:jimsch(_at_)exchange(_dot_)microsoft(_dot_)com]
Sent:   Wednesday, January 28, 1998 12:59 PM
To:     'Paul Hoffman / IMC'; ietf-smime(_at_)imc(_dot_)org
Subject:        RE: Question about signing attachments separately

I don't remember if this was changed in the S/MIME V2 spec or not,
however there was a general agreement among the S/MIME developers at the
last RSA workshop that we would restrict ourselfs to the case where the
security was applyed only once and only as the top level object.

This should change with people starting to implement the V3 spec, we
should handle security at any level and to any depth in the mime stream.
However don't be suprised if some clients only handle the restricted
case.

Jim Schaad
Microsoft

-----Original Message-----
From: Paul Hoffman / IMC [mailto:phoffman(_at_)imc(_dot_)org]
Sent: Wednesday, January 28, 1998 9:52 AM
To: ietf-smime(_at_)imc(_dot_)org
Subject: Re: Question about signing attachments separately


Karen missed Mark's point. If you have a MIME entity such as a
multipart/mixed,
you have the option of treating that as a single entity and signing it,
or
signing each sub-entity. I believe the current S/MIME spec is silent on
this
choice, but I suspect that some implementations may not handle
signatures on
non-nested subentities very well.

--Paul Hoffman, Director
--Internet Mail Consortium