[openpgp] Re: Primary Key Binding sigs on authentication subkeys

[Andrew Gallagher <[e-mail]>]

Hi, Stephan.

On 28 Jan 2025, at 22:51, Stephan Verbücheln <stephan=[e-mail]> wrote:
> 
> Since you did not even know that PGP auth keys are commonly used for
> SSH, maybe you should slow down instead of pushing forward before
> breaking everything. This again smells like Proton trying to change PGP
> with only their own use case of email in mind, already causing schism
> in the PGP community.


The fact that no one person knows everything about OpenPGP should not be considered a weakness. The reason we have a list like this, open to the public, is so that proposals can be debated in an inclusive forum and modified or rejected before anyone releases any code into the wild. I don’t think it’s constructive to berate individuals for asking questions on this list - we’re trying to encourage people to bring their ideas and questions here early, to ensure that the OpenPGP ecosystem improves over time (and I speak as someone who has had his own half-baked ideas cut down to size by this list on one or two occasions!).

There is a football (soccer) principle that I’ve seen applied to other online communities to great effect: "play the ball, not the man (or woman)". It should be possible to have a robust debate about the technical issues without crossing the line into making personal attacks.

A