[openpgp] Re: Key and Certificate Management in SOP

[Heiko Schäfer <[e-mail]>]

Hey dkg,

great to see the SOP spec grow more capabilities!

On 9/6/24 1:55 AM, Daniel Kahn Gillmor wrote:
> I'm preparing to add four new subcommands for OpenPGP Key and
> Certificate Management to the Stateless OpenPGP API:
>
>     sop update-keys      (keep an OpenPGP secret key "up-to-date")
>     sop merge-certs      (merge OpenPGP certificates that share primary keys)
>
>     sop certify          (certify a User ID in a cert)
>     sop validate-certs   (verify a User ID-to-cert binding)

One of my recurring concerns in the OpenPGP ecosystem is terminology, 
and the clarity/non-overlap of our terms.

 From that perspective, I'm concerned about the command name 
"validate-certs". While the command deals with "Certificates", it seems 
to mostly be concerned with "User IDs" (and signature packets). So based 
on our discussion just now, I think it would be good to replace the 
"cert" fragmentwith "userid".Something like "sop validate-userids" would 
strike me as strictly less potentially confusing. Heiko