RFC9788 · Header Protection for Cryptographically Protected Email

{
  "id": "RFC9788",
  "number": 9788,
  "title_en": "Header Protection for Cryptographically Protected Email",
  "title_ru": "",
  "summary_ru": "",
  "purpose_ru": "",
  "use_ru": "",
  "full_translation_path": "",
  "full_translation_checked_at": "",
  "full_translation_source_sha256": "",
  "architect_note_ru": "",
  "topics_ru": [],
  "translation_state": "not_prepared",
  "verification_level": "not_prepared",
  "verification_level_ru": "Русская выжимка не подготовлена",
  "verification_note_ru": "",
  "abstract_en": "S/MIME version 3.1 introduced a mechanism to provide end-to-end cryptographic protection of email message headers. However, few implementations generate messages using this mechanism, and several legacy implementations have revealed rendering or security issues when handling such a message. This document updates the S/MIME specification (RFC 8551) to offer a different mechanism that provides the same cryptographic protections but with fewer downsides when handled by legacy clients. Furthermore, it offers more explicit usability, privacy, and security guidance for clients when generating or handling email messages with cryptographic protection of message headers. The Header Protection scheme defined here is also applicable to messages with PGP/MIME (Pretty Good Privacy with MIME) cryptographic protections.",
  "authors": [
    "D. K. Gillmor",
    "B. Hoeneisen",
    "A. Melnikov"
  ],
  "organizations": [],
  "publication_date": "2025-08-01",
  "current_status": "PROPOSED STANDARD",
  "current_status_ru": "Предлагаемый стандарт",
  "publication_status": "PROPOSED STANDARD",
  "publication_status_ru": "Предлагаемый стандарт",
  "lifecycle": "active",
  "lifecycle_ru": "Действующий",
  "stream": "IETF",
  "stream_ru": "IETF",
  "area": "sec",
  "area_ru": "Безопасность",
  "working_group": "lamps",
  "source_draft": "draft-ietf-lamps-header-protection-25",
  "page_count": 218,
  "doi": "10.17487/RFC9788",
  "keywords": [
    "Header Protection",
    "Header Confidentiality Policy",
    "HCP",
    "cryptographic email",
    "email encryption",
    "encryption",
    "encrypt",
    "signature",
    "sign",
    "S/MIME",
    "PGP/MIME",
    "Legacy Display",
    "Legacy Display Element",
    "MIME",
    "Privacy",
    "HP-Outer",
    "hp-legacy-display",
    "hp"
  ],
  "formats": [
    "HTML",
    "TXT",
    "PDF",
    "XML"
  ],
  "relations": {
    "obsoletes": [],
    "obsoleted_by": [],
    "updates": [
      "RFC8551"
    ],
    "updated_by": [],
    "is_also": [],
    "see_also": []
  },
  "links": {
    "info": "https://www.rfc-editor.org/info/rfc9788/",
    "html": "https://www.rfc-editor.org/rfc/rfc9788.html",
    "txt": "https://www.rfc-editor.org/rfc/rfc9788.txt",
    "datatracker": "https://datatracker.ietf.org/doc/rfc9788/"
  }
}