Technical Summary
End-to-end cryptographic protections for e-mail messages can provide
useful security. However, the standards for providing cryptographic
protection are extremely flexible. That flexibility can trap users
and cause surprising failures. This document offers guidance for
mail user agent implementers to help mitigate those risks, and to
make end-to-end e-mail simple and secure for the end user. It
provides a useful set of vocabulary as well as recommendations to
avoid common failures. It also identifies a number of currently
unsolved usability and interoperability problems.
Working Group Summary
There is support in the LAMPS WG for this document. It was developed over the last three years, with discussion at almost every IETF meeting during that time period.
Document Quality
There has been some code written, but so far, vendors of major email user agents have not said whether they will implement. One did offer insightful review of the Internet-Draft during WG Last Call.
Personnel
The Document Shepherd for this document is Russ Housley.
The Responsible Area Director is Roman Danyliw.