attachment
<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hi Mike,<div class=""><br class=""></div><div class="">This seems like good news! That made me realize something: as a new usage context for PGP, we CAN require the most stringent level of security and not be worried about backward compatibility. In other words, we don't have to be grandfathering in all the old stuff in PGP - we can require the best set of encryption primitives currently available and baseline on that, and abandon all the older and weaker tech.</div><div class=""><br class=""></div><div class=""><div class="">
<div dir="auto" style="color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Smith<br class=""><br class="">/**<br class=""> Smith Kennedy<br class=""> Wireless & Standards Architect - IPG-PPS<br class=""> Standards - IEEE ISTO PWG / Bluetooth SIG / Wi-Fi Alliance / NFC Forum / USB-IF<br class=""> Chair, IEEE ISTO Printer Working Group<br class=""> HP Inc.<br class="">*/<br class=""><br class=""><br class=""></div></div>
</div>
<div><br class=""><blockquote type="cite" class=""><div class="">On Jun 4, 2018, at 5:01 AM, Michael Sweet <<a href="mailto:msweet@apple.com" class="">msweet@apple.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">All,<br class=""><br class="">The PGP folks have been discussing the EFAIL paper:<br class=""><br class=""> <a href="https://lists.gnupg.org/pipermail/gnupg-users/2018-May/060315.html" class="">https://lists.gnupg.org/pipermail/gnupg-users/2018-May/060315.html</a><br class=""><br class="">In short, PGP has supported a "MDC" mode which is used to provide protection similar to GCM, and email clients are ignoring warnings (which IMHO should be hard PGP errors unless the user explicitly says to override the checks) and not validating multi-part MIME messages.<br class=""><br class="">It *does* look like S/MIME is still compromised for the time being, but perhaps we can still move forward just using PGP (which was the original plan anyways...)<br class=""><br class="">_________________________________________________________<br class="">Michael Sweet, Senior Printing System Engineer<br class=""><br class="">_______________________________________________<br class="">ipp mailing list<br class=""><a href="mailto:ipp@pwg.org" class="">ipp@pwg.org</a><br class="">https://www.pwg.org/mailman/listinfo/ipp<br class=""></div></div></blockquote></div><br class=""></div></body></html>