[openpgp] Re: I-D Action: draft-ietf-openpgp-replacementkey-02.txt

Andrew Gallagher <andrewg@andrewg.com> Tue, 26 November 2024 18:48 UTC

Return-Path: <andrewg@andrewg.com>
X-Original-To: openpgp@ietfa.amsl.com
Delivered-To: openpgp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AA123C081E2F; Tue, 26 Nov 2024 10:48:43 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.106
X-Spam-Level:
X-Spam-Status: No, score=-2.106 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=andrewg.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RSDKIljJGBZD; Tue, 26 Nov 2024 10:48:39 -0800 (PST)
Received: from fum.andrewg.com (fum.andrewg.com [IPv6:2a01:4f9:c011:23ad::1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1C4F8C07A1D5; Tue, 26 Nov 2024 10:48:38 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=andrewg.com; s=andrewg-com; t=1732646914; bh=b+JQRCz01KejB1kBTv5010Rx7kaeiRss/BP9+6+u0pY=; h=Subject:From:In-Reply-To:Date:Cc:References:To:From; b=tp2DgliYPfKItKIafu002qXu2pyPLToUX6en2A1eMXBb2+a7328v5tIQXK5WTVEMz eM7ErLBWMA0VGrOyDhXLUhZbcoolKrttVd0joUpkfa5QXeGZr23MSu2tBe0wcQ68xb YcypRbc+Llr9UyUeRYmrIJPoEqITQYSnXK+9JzmElqlUADpELlzJTvhbYQsMO1V7/D eXX4Tq1bTdfUDugUNJ+IWFjkVlIuMZb5EswsosbspqQL/F7AQQXIfROYThQuFEXelj vvntBM5qRc6+T6tZiJw5snCkVfHCctrCWVPVA4qhV7pC8dZ27dXWD+QjyUcMX2tdav gWLZDSTU1fALw==
Received: from smtpclient.apple (serenity [IPv6:fc93:5820:7349:eda2:99a7::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by fum.andrewg.com (Postfix) with ESMTPSA id BF7A95ED32; Tue, 26 Nov 2024 18:48:34 +0000 (UTC)
Content-Type: multipart/signed; boundary="Apple-Mail=_A38A8C55-17B5-4D7A-AEB3-97DBD8FC5377"; protocol="application/pgp-signature"; micalg="pgp-sha512"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3731.700.6.1.9\))
From: Andrew Gallagher <andrewg@andrewg.com>
In-Reply-To: <173264571597.581885.1047714570419252899@dt-datatracker-5679c9c6d-qbvvv>
Date: Tue, 26 Nov 2024 18:48:15 +0000
Message-Id: <14B07CCC-BD69-4302-9E1C-96B853942C5F@andrewg.com>
References: <173264571597.581885.1047714570419252899@dt-datatracker-5679c9c6d-qbvvv>
To: IETF OpenPGP WG <openpgp@ietf.org>
X-Mailer: Apple Mail (2.3731.700.6.1.9)
Message-ID-Hash: FQEVRGAOZUZIKKHVMIE2MIIVUYJHBDWL
X-Message-ID-Hash: FQEVRGAOZUZIKKHVMIE2MIIVUYJHBDWL
X-MailFrom: andrewg@andrewg.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-openpgp.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: i-d-announce@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [openpgp] Re: I-D Action: draft-ietf-openpgp-replacementkey-02.txt
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/openpgp/19ySiGDkbalPhxLk3___Cq9XZ_M>
List-Archive: <https://mailarchive.ietf.org/arch/browse/openpgp>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Owner: <mailto:openpgp-owner@ietf.org>
List-Post: <mailto:openpgp@ietf.org>
List-Subscribe: <mailto:openpgp-join@ietf.org>
List-Unsubscribe: <mailto:openpgp-leave@ietf.org>

On 26 Nov 2024, at 18:28, internet-drafts@ietf.org wrote:
> 
> Internet-Draft draft-ietf-openpgp-replacementkey-02.txt is now available. It
> is a work item of the Open Specification for Pretty Good Privacy (OPENPGP) WG
> of the IETF.

Hi, all.

A quick summary of the changes in the latest draft:

* Added explanation of hard vs soft revocations.
* Remove the "No Replacement" bit and use the Reason for Revocation subpacket instead.
* Record length field is now two octets.
* Inverted treatment of undefined flag bits.
* Remove references to the Preferred Key Server subpacket.
* Expanded example workflows section.

This draft closes all outstanding wire-format issues. If you are planning to implement this mechanism, please let the group know. We will need to start thinking about interop testing shortly.

Thanks again,
A