An Encryption Question

[PAUL LOGSTON <PLOGSTON@usagroup.com>]

I am at the point where I am actually writing code to do our
file encryption for WhizKid, but I have a dilemma.

The question is: How closely are we going to follow RFC2015?

You see, the easy way to do this is simply to encrypt the
file using ASCII armor, attach it to an e-mail using MIME and
send it.  However, that isn't really RFC2015 compliant.

RFC2015 would have first put the file into a MIME "envelope",
then encrypt the entire file, plus MIME stuff, using ASCII
armor.  That output is then placed as a MIME attachment on an
e-mail and sent.  This does create two sets of MIME headers
-- one in the encrypted file and one surrounding it.

You can see this behavior in Eudora with the PGP plug-in.  I
had first thought it was a bug, but now I believe it to be
intentional.

So, which should we agree to use?  I feel that we really have
to agree in some measure, since we really can't expect
everyone to adapt their software by destination.