@techreport{ietf-lamps-e2e-mail-guidance-16, number = {draft-ietf-lamps-e2e-mail-guidance-16}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-lamps-e2e-mail-guidance/16/}, author = {Daniel Kahn Gillmor and Bernie Hoeneisen and Alexey Melnikov}, title = {{Guidance on End-to-End E-mail Security}}, pagetotal = 67, year = 2024, month = mar, day = 16, abstract = {End-to-end cryptographic protections for e-mail messages can provide useful security. However, the standards for providing cryptographic protection are extremely flexible. That flexibility can trap users and cause surprising failures. This document offers guidance for mail user agent implementers to help mitigate those risks, and to make end-to-end e-mail simple and secure for the end user. It provides a useful set of vocabulary as well as recommendations to avoid common failures. It also identifies a number of currently unsolved usability and interoperability problems.}, }