Re: using the fringe to indicate good signatures

diff --git a/66/35d9411fe8adfaf015408b59c20e6362f0a726 b/66/35d9411fe8adfaf015408b59c20e6362f0a726
new file mode 100644 (file)
index 0000000..4da72e2
--- /dev/null
+++ b/66/35d9411fe8adfaf015408b59c20e6362f0a726
@@ -0,0 +1,101 @@
+Return-Path: <dme@dme.org>\r
+X-Original-To: notmuch@notmuchmail.org\r
+Delivered-To: notmuch@notmuchmail.org\r
+Received: from localhost (localhost [127.0.0.1])\r
+ by arlo.cworth.org (Postfix) with ESMTP id 5740B6DE0B7C\r
+ for <notmuch@notmuchmail.org>; Tue,  8 Sep 2015 02:53:52 -0700 (PDT)\r
+X-Virus-Scanned: Debian amavisd-new at cworth.org\r
+X-Spam-Flag: NO\r
+X-Spam-Score: 0.581\r
+X-Spam-Level: \r
+X-Spam-Status: No, score=0.581 tagged_above=-999 required=5 tests=[AWL=0.648, \r
+ RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01,\r
+ RCVD_IN_MSPIKE_WL=-0.01, SPF_NEUTRAL=0.652, UNPARSEABLE_RELAY=0.001]\r
+ autolearn=disabled\r
+Received: from arlo.cworth.org ([127.0.0.1])\r
+ by localhost (arlo.cworth.org [127.0.0.1]) (amavisd-new, port 10024)\r
+ with ESMTP id ke7gixUzKf37 for <notmuch@notmuchmail.org>;\r
+ Tue,  8 Sep 2015 02:53:49 -0700 (PDT)\r
+Received: from mail-wi0-f182.google.com (mail-wi0-f182.google.com\r
+ [209.85.212.182])\r
+ by arlo.cworth.org (Postfix) with ESMTPS id 643986DE0B22\r
+ for <notmuch@notmuchmail.org>; Tue,  8 Sep 2015 02:53:49 -0700 (PDT)\r
+Received: by wicfx3 with SMTP id fx3so108415188wic.0\r
+ for <notmuch@notmuchmail.org>; Tue, 08 Sep 2015 02:53:47 -0700 (PDT)\r
+X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;\r
+ d=1e100.net; s=20130820;\r
+ h=x-gm-message-state:to:subject:in-reply-to:references:user-agent\r
+ :from:date:message-id:mime-version:content-type;\r
+ bh=bKmEE8IOBS2dt0ix0MaCitI3oMebFZ8npZk7HHrhzCQ=;\r
+ b=aEUoo9CqED9pKWAJa9Lb1T+mc+Bb3zfcOyZ+XW9up6JjLQe4kBFT7/WpaoK7+mBW2Y\r
+ 9FOjPeWPh2zvdShsP3k+IMQXPpbNIQOesH+6Oajh4PKxci9GOAyxJIEp9IxWiYs4+FDK\r
+ /9ZFNyO+x3h+u/L4F0zsmTrbLv8kJXakiTDke443GCtyQrUpvC9dOpL6kxOWfsIlsySP\r
+ cKECcxMCjYS0lPzIzCqLRH65nedj7S0xPHh+hNELCcj07KdMjvMAeIutFhwOVcDi2PML\r
+ WuR6q6l5Owd/PnQ5eFWnipHKXmTV/XaX+7qWHkREbBrsNg+I9Eni2g7ZHDGcESlawVTM\r
+ SrTA==\r
+X-Gm-Message-State:\r
+ ALoCoQl777zLQADAH2hlQBUL0fHSgkM2vicQR7Xs+veelh2eT5joiImYJK/SmkPbZwVVSuobYzV1\r
+X-Received: by 10.180.8.3 with SMTP id n3mr19180540wia.41.1441706027376;\r
+ Tue, 08 Sep 2015 02:53:47 -0700 (PDT)\r
+Received: from disaster-area.hh.sledj.net\r
+ ([2a01:348:1a2:1:ea39:35ff:fe2c:a227])\r
+ by smtp.gmail.com with ESMTPSA id lf10sm3887251wjb.23.2015.09.08.02.53.45\r
+ (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);\r
+ Tue, 08 Sep 2015 02:53:45 -0700 (PDT)\r
+Received: from localhost (30000@localhost [local]);\r
+ by localhost (OpenSMTPD) with ESMTPA id 25477a2a;\r
+ Tue, 8 Sep 2015 09:53:44 +0000 (UTC)\r
+To: Daniel Kahn Gillmor <dkg@fifthhorseman.net>, notmuch@notmuchmail.org\r
+Subject: Re: using the fringe to indicate good signatures\r
+In-Reply-To: <87twr5jtqy.fsf@alice.fifthhorseman.net>\r
+References: <m2mvxmxfwl.fsf@heart-of-gold.hh.sledj.net>\r
+ <87d1xtn8s8.fsf@alice.fifthhorseman.net>\r
+ <m2vbbl8n5l.fsf@heart-of-gold.hh.sledj.net>\r
+ <87twr5jtqy.fsf@alice.fifthhorseman.net>\r
+User-Agent: none\r
+From: David Edmondson <dme@dme.org>\r
+Date: Tue, 08 Sep 2015 10:53:44 +0100\r
+Message-ID: <m2si6p8cev.fsf@heart-of-gold.hh.sledj.net>\r
+MIME-Version: 1.0\r
+Content-Type: text/plain\r
+X-BeenThere: notmuch@notmuchmail.org\r
+X-Mailman-Version: 2.1.18\r
+Precedence: list\r
+List-Id: "Use and development of the notmuch mail system."\r
+ <notmuch.notmuchmail.org>\r
+List-Unsubscribe: <http://notmuchmail.org/mailman/options/notmuch>,\r
+ <mailto:notmuch-request@notmuchmail.org?subject=unsubscribe>\r
+List-Archive: <http://notmuchmail.org/pipermail/notmuch/>\r
+List-Post: <mailto:notmuch@notmuchmail.org>\r
+List-Help: <mailto:notmuch-request@notmuchmail.org?subject=help>\r
+List-Subscribe: <http://notmuchmail.org/mailman/listinfo/notmuch>,\r
+ <mailto:notmuch-request@notmuchmail.org?subject=subscribe>\r
+X-List-Received-Date: Tue, 08 Sep 2015 09:53:52 -0000\r
+\r
+On Tue, Sep 08 2015, Daniel Kahn Gillmor <dkg@fifthhorseman.net> wrote:\r
+>> More seriously, we could use the indentation space for a similar\r
+>> indicator, which would allow us some room at an appropriate depth for\r
+>> each message (but not each part (in the default configuration)).\r
+>\r
+> hm, but couldn't the indentation space be spoofed by a well-crafted\r
+> message?  that is: a non-indented message will consume space up to (but\r
+> not including) the fringe.  so a well-crafted message could be made to\r
+> *look* like an indented message, including whatever is comparable to the\r
+> chrome/UI elements we would use for an actual signed message.\r
+\r
+Yes, I guess that is possible at some level.\r
+\r
+The fringe is a bitmap - we could use the leftmost vertical line of it\r
+for the outermost component, next line for the next component, ...\r
+\r
+Or perhaps use images:\r
+   - all levels of the message at this line are "good",\r
+   - some of the levels of the message at this line are "good".\r
+\r
+Or maybe display a QR code in the fringe, and you point your phone at it\r
+to find out what is going on?\r
+\r
+> I think it is also acceptable to just punt at some level -- we can say\r
+> "notmuch-emacs will indicate the outermost signed message part in the\r
+> fringe; it will not indicate nested signed messages in the fringe".\r
+> this is still an improvement from the status quo.\r