Amanda,
Thanks for a thoughtful reply. I think we do agree on most
points. I'm happy to hear that your product will try to avoid
confusing the user, but I'd feel much more comfortable knowing that
any compliant implementation is required to do as well. Also, I worry
about the home user market that you cited. I think these folks are
being set up to deal with a key management problem that will quickly
exceed their ability to understand what is going on. For example, how
confident are you that the home user will understand that an encrypted
but unsigned message do not really mean that the originator is
accurately identified by the "From" field in the header?
Steve