Re: [Nmh-workers] nmh in near, medium, and far-term

[Valdis . Kletnieks]

On Sat, 10 Dec 2011 20:56:44 EST, address@hidden said:

> Unfortunately, for signed mails, it's quite often the case that you will need
> to re-verify the signature at a later date.  If 6 months later you need to
> produce the mail your boss sent, you're probably going to want to be able to
> reproduce the signature too.

Actually, let me take that a step further - you *always* need to be able to
deal with the usage case "Hey, let me forward you the note that Fred sent
me last month on this - it has everything you need attached".

Which means you need to either keep Fred's actual message around, or enough
information to regenerate the message.  And if Fred included a digital
signature or encryption, then you need to be able to cope with that as well.

pgpbxCOC8rewI.pgp
Description: PGP signature