From 523d9fd9ceda29f218b74be6aa7402f6fe267b76 Mon Sep 17 00:00:00 2001 From: Daniel Kahn Gillmor Date: Wed, 9 Sep 2015 02:43:49 +2000 Subject: [PATCH] Re: using the fringe to indicate good signatures --- d0/a31f6ecac7b8cf4c49bd5af9435217e84d8f1e | 89 +++++++++++++++++++++++ 1 file changed, 89 insertions(+) create mode 100644 d0/a31f6ecac7b8cf4c49bd5af9435217e84d8f1e diff --git a/d0/a31f6ecac7b8cf4c49bd5af9435217e84d8f1e b/d0/a31f6ecac7b8cf4c49bd5af9435217e84d8f1e new file mode 100644 index 000000000..e1fef74c2 --- /dev/null +++ b/d0/a31f6ecac7b8cf4c49bd5af9435217e84d8f1e @@ -0,0 +1,89 @@ +Return-Path: +X-Original-To: notmuch@notmuchmail.org +Delivered-To: notmuch@notmuchmail.org +Received: from localhost (localhost [127.0.0.1]) + by arlo.cworth.org (Postfix) with ESMTP id 785DD6DE0C3A + for ; Mon, 7 Sep 2015 23:43:55 -0700 (PDT) +X-Virus-Scanned: Debian amavisd-new at cworth.org +X-Spam-Flag: NO +X-Spam-Score: -0.107 +X-Spam-Level: +X-Spam-Status: No, score=-0.107 tagged_above=-999 required=5 + tests=[AWL=-0.107] autolearn=disabled +Received: from arlo.cworth.org ([127.0.0.1]) + by localhost (arlo.cworth.org [127.0.0.1]) (amavisd-new, port 10024) + with ESMTP id nIpaGldqWK3n for ; + Mon, 7 Sep 2015 23:43:53 -0700 (PDT) +Received: from che.mayfirst.org (che.mayfirst.org [209.234.253.108]) + by arlo.cworth.org (Postfix) with ESMTP id D84656DE005F + for ; Mon, 7 Sep 2015 23:43:52 -0700 (PDT) +Received: from fifthhorseman.net (ool-6c3a0662.static.optonline.net + [108.58.6.98]) + by che.mayfirst.org (Postfix) with ESMTPSA id 02B10F984; + Tue, 8 Sep 2015 02:43:49 -0400 (EDT) +Received: by fifthhorseman.net (Postfix, from userid 1000) + id 6E7E11FF8A; Tue, 8 Sep 2015 02:43:49 -0400 (EDT) +From: Daniel Kahn Gillmor +To: David Edmondson , notmuch@notmuchmail.org +Subject: Re: using the fringe to indicate good signatures +In-Reply-To: +References: + <87d1xtn8s8.fsf@alice.fifthhorseman.net> + +User-Agent: Notmuch/0.20.2 (http://notmuchmail.org) Emacs/24.5.1 + (x86_64-pc-linux-gnu) +Date: Tue, 08 Sep 2015 02:43:49 -0400 +Message-ID: <87twr5jtqy.fsf@alice.fifthhorseman.net> +MIME-Version: 1.0 +Content-Type: text/plain +X-BeenThere: notmuch@notmuchmail.org +X-Mailman-Version: 2.1.18 +Precedence: list +List-Id: "Use and development of the notmuch mail system." + +List-Unsubscribe: , + +List-Archive: +List-Post: +List-Help: +List-Subscribe: , + +X-List-Received-Date: Tue, 08 Sep 2015 06:43:55 -0000 + +On Tue 2015-09-08 02:01:42 -0400, David Edmondson wrote: +> On Mon, Sep 07 2015, Daniel Kahn Gillmor wrote: +>> On Thu 2015-08-20 09:12:26 -0400, David Edmondson wrote: +>>> After listening to bremner, dkg et al. from Heidelberg, I threw together +>>> a quick patch to see how we might indicate signature validity in the +>>> fringe. The intention is to prompt more discussion - this code is not +>>> ready to ship. +>> +>>> The patch is attached. The result looks something like: +>>> http://dme.org/data/images/notmuch-signed-fringe.png +>> +>> I like the basic idea of this, thanks for putting it together. It's +>> good to put security indicators in a region of the UI that the message +>> content cannot modify or spoof. +>> +>> What do we think should be done if there are multiple nested signatures? +> +> Cry? + +heh :) + +> More seriously, we could use the indentation space for a similar +> indicator, which would allow us some room at an appropriate depth for +> each message (but not each part (in the default configuration)). + +hm, but couldn't the indentation space be spoofed by a well-crafted +message? that is: a non-indented message will consume space up to (but +not including) the fringe. so a well-crafted message could be made to +*look* like an indented message, including whatever is comparable to the +chrome/UI elements we would use for an actual signed message. + +I think it is also acceptable to just punt at some level -- we can say +"notmuch-emacs will indicate the outermost signed message part in the +fringe; it will not indicate nested signed messages in the fringe". +this is still an improvement from the status quo. + + --dkg -- 2.26.2