1 Return-Path: <dkg@fifthhorseman.net>
\r
2 X-Original-To: notmuch@notmuchmail.org
\r
3 Delivered-To: notmuch@notmuchmail.org
\r
4 Received: from localhost (localhost [127.0.0.1])
\r
5 by arlo.cworth.org (Postfix) with ESMTP id 785DD6DE0C3A
\r
6 for <notmuch@notmuchmail.org>; Mon, 7 Sep 2015 23:43:55 -0700 (PDT)
\r
7 X-Virus-Scanned: Debian amavisd-new at cworth.org
\r
11 X-Spam-Status: No, score=-0.107 tagged_above=-999 required=5
\r
12 tests=[AWL=-0.107] autolearn=disabled
\r
13 Received: from arlo.cworth.org ([127.0.0.1])
\r
14 by localhost (arlo.cworth.org [127.0.0.1]) (amavisd-new, port 10024)
\r
15 with ESMTP id nIpaGldqWK3n for <notmuch@notmuchmail.org>;
\r
16 Mon, 7 Sep 2015 23:43:53 -0700 (PDT)
\r
17 Received: from che.mayfirst.org (che.mayfirst.org [209.234.253.108])
\r
18 by arlo.cworth.org (Postfix) with ESMTP id D84656DE005F
\r
19 for <notmuch@notmuchmail.org>; Mon, 7 Sep 2015 23:43:52 -0700 (PDT)
\r
20 Received: from fifthhorseman.net (ool-6c3a0662.static.optonline.net
\r
22 by che.mayfirst.org (Postfix) with ESMTPSA id 02B10F984;
\r
23 Tue, 8 Sep 2015 02:43:49 -0400 (EDT)
\r
24 Received: by fifthhorseman.net (Postfix, from userid 1000)
\r
25 id 6E7E11FF8A; Tue, 8 Sep 2015 02:43:49 -0400 (EDT)
\r
26 From: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
\r
27 To: David Edmondson <dme@dme.org>, notmuch@notmuchmail.org
\r
28 Subject: Re: using the fringe to indicate good signatures
\r
29 In-Reply-To: <m2vbbl8n5l.fsf@heart-of-gold.hh.sledj.net>
\r
30 References: <m2mvxmxfwl.fsf@heart-of-gold.hh.sledj.net>
\r
31 <87d1xtn8s8.fsf@alice.fifthhorseman.net>
\r
32 <m2vbbl8n5l.fsf@heart-of-gold.hh.sledj.net>
\r
33 User-Agent: Notmuch/0.20.2 (http://notmuchmail.org) Emacs/24.5.1
\r
34 (x86_64-pc-linux-gnu)
\r
35 Date: Tue, 08 Sep 2015 02:43:49 -0400
\r
36 Message-ID: <87twr5jtqy.fsf@alice.fifthhorseman.net>
\r
38 Content-Type: text/plain
\r
39 X-BeenThere: notmuch@notmuchmail.org
\r
40 X-Mailman-Version: 2.1.18
\r
42 List-Id: "Use and development of the notmuch mail system."
\r
43 <notmuch.notmuchmail.org>
\r
44 List-Unsubscribe: <http://notmuchmail.org/mailman/options/notmuch>,
\r
45 <mailto:notmuch-request@notmuchmail.org?subject=unsubscribe>
\r
46 List-Archive: <http://notmuchmail.org/pipermail/notmuch/>
\r
47 List-Post: <mailto:notmuch@notmuchmail.org>
\r
48 List-Help: <mailto:notmuch-request@notmuchmail.org?subject=help>
\r
49 List-Subscribe: <http://notmuchmail.org/mailman/listinfo/notmuch>,
\r
50 <mailto:notmuch-request@notmuchmail.org?subject=subscribe>
\r
51 X-List-Received-Date: Tue, 08 Sep 2015 06:43:55 -0000
\r
53 On Tue 2015-09-08 02:01:42 -0400, David Edmondson wrote:
\r
54 > On Mon, Sep 07 2015, Daniel Kahn Gillmor <dkg@fifthhorseman.net> wrote:
\r
55 >> On Thu 2015-08-20 09:12:26 -0400, David Edmondson wrote:
\r
56 >>> After listening to bremner, dkg et al. from Heidelberg, I threw together
\r
57 >>> a quick patch to see how we might indicate signature validity in the
\r
58 >>> fringe. The intention is to prompt more discussion - this code is not
\r
61 >>> The patch is attached. The result looks something like:
\r
62 >>> http://dme.org/data/images/notmuch-signed-fringe.png
\r
64 >> I like the basic idea of this, thanks for putting it together. It's
\r
65 >> good to put security indicators in a region of the UI that the message
\r
66 >> content cannot modify or spoof.
\r
68 >> What do we think should be done if there are multiple nested signatures?
\r
74 > More seriously, we could use the indentation space for a similar
\r
75 > indicator, which would allow us some room at an appropriate depth for
\r
76 > each message (but not each part (in the default configuration)).
\r
78 hm, but couldn't the indentation space be spoofed by a well-crafted
\r
79 message? that is: a non-indented message will consume space up to (but
\r
80 not including) the fringe. so a well-crafted message could be made to
\r
81 *look* like an indented message, including whatever is comparable to the
\r
82 chrome/UI elements we would use for an actual signed message.
\r
84 I think it is also acceptable to just punt at some level -- we can say
\r
85 "notmuch-emacs will indicate the outermost signed message part in the
\r
86 fringe; it will not indicate nested signed messages in the fringe".
\r
87 this is still an improvement from the status quo.
\r