{"action":"created","issue":{"url":"https://api.github.com/repos/openpgpjs/openpgpjs/issues/452","repository_url":"https://api.github.com/repos/openpgpjs/openpgpjs","labels_url":"https://api.github.com/repos/openpgpjs/openpgpjs/issues/452/labels{/name}","comments_url":"https://api.github.com/repos/openpgpjs/openpgpjs/issues/452/comments","events_url":"https://api.github.com/repos/openpgpjs/openpgpjs/issues/452/events","html_url":"https://github.com/openpgpjs/openpgpjs/issues/452","id":153328080,"number":452,"title":"Add support for detached signatures","user":{"login":"barrydegraaff","id":4353213,"avatar_url":"https://avatars.githubusercontent.com/u/4353213?v=3","gravatar_id":"","url":"https://api.github.com/users/barrydegraaff","html_url":"https://github.com/barrydegraaff","followers_url":"https://api.github.com/users/barrydegraaff/followers","following_url":"https://api.github.com/users/barrydegraaff/following{/other_user}","gists_url":"https://api.github.com/users/barrydegraaff/gists{/gist_id}","starred_url":"https://api.github.com/users/barrydegraaff/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/barrydegraaff/subscriptions","organizations_url":"https://api.github.com/users/barrydegraaff/orgs","repos_url":"https://api.github.com/users/barrydegraaff/repos","events_url":"https://api.github.com/users/barrydegraaff/events{/privacy}","received_events_url":"https://api.github.com/users/barrydegraaff/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":6,"created_at":"2016-05-05T21:16:20Z","updated_at":"2016-12-27T23:36:51Z","closed_at":null,"body":"Hello Devs,\n\nI would like to ask you to consider adding support for PGP detached signatures. Right now OpenPGP.js only supports sign/verify clear signed messages. \n\nThe benefits of detached signatures are:\n1. Allows implementations to support for pgp/mime (that uses detached signatures instead of clear signing)\n2. Separates the data content and the signature (end users love this)\n3. Allows signing binary data (clear-signing works only for plain text and alters the data before signing, remove white spaces)\n\nThe usefulness of detached signatures may be debatable, but if any, I guess in the end if it is about email, one also wants to support pgp/mime.\n\nI cannot see the full implication, but building  detached signature support w/o support for binaries may not be very hard (if you are already a seasoned openpgpjs dev)\n\nSee also:\nhttps://github.com/Zimbra-Community/pgp-zimlet/issues/173\n\ndetached signatures are one of 3 possible ways of making signatures (only 2 are used for email), see:\nhttps://www.gnupg.org/gph/en/manual/x135.html\n\nOpenPGP.js only supports clear-signed signatures:\nopenpgpjs/openpgpjs#243\nhttps://openpgpjs.org/openpgpjs/doc/module-openpgp.html\n\nThe main difference between clear-signed and detached signatures are:\nhttp://www.gossamer-threads.com/lists/gnupg/users/67646\n(scroll down)\n\nThanks for reading! And thanks for the good work.\n\nBarry\n"},"comment":{"url":"https://api.github.com/repos/openpgpjs/openpgpjs/issues/comments/269398338","html_url":"https://github.com/openpgpjs/openpgpjs/issues/452#issuecomment-269398338","issue_url":"https://api.github.com/repos/openpgpjs/openpgpjs/issues/452","id":269398338,"user":{"login":"davidlucid","id":12579889,"avatar_url":"https://avatars.githubusercontent.com/u/12579889?v=3","gravatar_id":"","url":"https://api.github.com/users/davidlucid","html_url":"https://github.com/davidlucid","followers_url":"https://api.github.com/users/davidlucid/followers","following_url":"https://api.github.com/users/davidlucid/following{/other_user}","gists_url":"https://api.github.com/users/davidlucid/gists{/gist_id}","starred_url":"https://api.github.com/users/davidlucid/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/davidlucid/subscriptions","organizations_url":"https://api.github.com/users/davidlucid/orgs","repos_url":"https://api.github.com/users/davidlucid/repos","events_url":"https://api.github.com/users/davidlucid/events{/privacy}","received_events_url":"https://api.github.com/users/davidlucid/received_events","type":"User","site_admin":false},"created_at":"2016-12-27T23:36:51Z","updated_at":"2016-12-27T23:36:51Z","body":"@wmhilton I ended up switching to Keybase's implementation (https://keybase.io/kbpgp). Feel free to check out my implementation over here: https://github.com/HardBTC/WorldCitizenIDKit"}}
{"actor":{"display_login":"davidlucid"}}