%% You should probably cite draft-ietf-lamps-header-protection-20 instead of this revision. @techreport{ietf-lamps-header-protection-09, number = {draft-ietf-lamps-header-protection-09}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-lamps-header-protection/09/}, author = {Daniel Kahn Gillmor and Bernie Hoeneisen and Alexey Melnikov}, title = {{Header Protection for S/MIME}}, pagetotal = 176, year = 2022, month = nov, day = 23, abstract = {S/MIME version 3.1 introduced a mechanism to provide end-to-end cryptographic protection of e-mail message headers. However, few implementations generate messages using this mechanism, and several legacy implementations have revealed rendering or security issues when handling such a message. This document updates the S/MIME specification to offer a different mechanism that provides the same cryptographic protections but with fewer downsides when handled by legacy clients. Furthermore, it offers more explicit guidance for clients when generating or handling e-mail messages with cryptographic protection of message headers.}, }