a proposed change to JSON output to report verification of PGP/MIME signatures.

[David Bremner]

On Sat, 13 Nov 2010 02:55:50 -0500, Daniel Kahn Gillmor <dkg at fifthhorseman.net> wrote:

> A signed MIME part will contain a new element "signedby", which is a
> list of part numbers identifying signatures that cover this part.
> 
> Signature parts (Content-Type: application/pgp-signature) will contain a
> new element "signs", which points back to the list of parts this
> signature covers.

Are both the forward and backward pointers needed?

> 
> Would it make more sense to do deeper structural modifications of the
> json output (e.g. return the full MIME tree instead of a list of parts)
> than to go with the current proposal?
> 

Yeah, this occured to me too, especially since I think David Edmondson
has some changes in mind to support better handling of
multipart/alternative parts.

d