On Thursday 08 October 2009 15:43:49 Vladislav Bogdanov wrote:
Jonas Meurer wrote:
hello,
i already wrote about developing a crypt/gpg plugin for roundcube to this list in the past. in my eyes several issues need to be adressed in roundcube core before it's possible to implement the plugin itself.
Just my 2c about patch. It would be great if all detection of inline ---SIGNED--- and ---ENCRYPTED--- messages is moved to hooks. Thus we can implement both S/MIME and PGP support as pure plugins without RC core even knows about possible encryption mechs.
S/MIME signatures as encryption don't work on --SIGNED--/--ENCRYPTED-- as they are pure mime parts of the message.
As below other PGP siging/encryption are also mime parts. I was thinking a generic mime type handling API could work.
An plugin registers and says I handle content type P with fields X=Z. This could allow image display, vcal and other attachments.
pgp sign: Content-Type: multipart/signed; micalg="pgp-sha1"; protocol="application/pgp- signature";
pgp encrypt: Content-Type: multipart/encrypted; protocol="application/pgp-encrypted";
s/mime sign: Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1;
s/mime encrypt: Content-Type: application/x-pkcs7-mime; smime-type=enveloped-data;
I'm sure the IANA has a better source of information than this.
I even thought inline-pgp was getting to be far less common and maybe not worth dealing with.