MIME-PEM Interaction ID Authors:
You have clearly spent alot of time on this document, and I have one suggestion
that needs to be included to keep implementors from using these privacy and
integrity/authentication tools inappropriately.
Although the Examples section shows signatures being applied before encryption,
the Introduction and content type discussion should make it clear that signed
contents may be encrypted, but that encrypted contents should not be signed.
Non-repudiation of ciphertext does not appear useful to me.
Russ