[openpgp] Re: Key selection and other semantics
Andrew Gallagher <andrewg@andrewg.com> Tue, 06 October 2026 13:26 UTC
Received: from fum.andrewg.com (fum.andrewg.com [IPv6:2a01:4f9:c011:23ad::1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by mx.ietf.org (Postfix) with ESMTPS id BC90242 for <openpgp@ietf.org>; Tue, 06 Oct 2026 13:26:54 +0000 (UTC)
Authentication-Results: mx.ietf.org; dkim=pass header.d=andrewg.com header.s=andrewg-com header.b=OcGh9SK3; spf=pass (mx.ietf.org: domain of andrewg@andrewg.com designates 2a01:4f9:c011:23ad::1 as permitted sender) smtp.mailfrom=andrewg@andrewg.com; dmarc=pass (policy=quarantine) header.from=andrewg.com
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=andrewg.com; s=andrewg-com; t=1791293213; bh=/FaeVRMItX3/2U4CFi27/X59K1i9Xqr+wDdD5MQ5+Ig=; h=Date:Subject:To:References:From:In-Reply-To:From; b=OcGh9SK3pkoiLyMr9iJEjd9LbNGJFh8NLmYq5h7y7xRTs4ZKznMuKOcv5RuC4O+om 1scW7ttShbB65z5xJTKvoMdh6KnBbiHaUgF/uzzJdqI8I3EDUaObHdxHfW8+TlwMC1 badST+l8kWX2s8aB476BaiTTz+f8chcUefo9JQUQIlzgXGdKyn1FuHkQ3VkJZj9+iM zrdG3AfpLoGk+qZ8WkHrVO9ZMfIdH/I9U/VYyN7G9nli8EjtdN+7sS/dDrq3jbPdiz bEAGZBgEoPA1ZAY1PzIOFDoa4D+fu4VbuhuPJnSlVC8C6lbNCTqFjEK/4rinUHS4N8 7IvN0sQdNGfcw==
Received: from [192.168.1.140] (unknown [176.61.115.103]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by fum.andrewg.com (Postfix) with ESMTPSA id 249115E452 for <openpgp@ietf.org>; Tue, 06 Oct 2026 13:26:53 +0000 (UTC)
Message-ID: <bdb7f518-2c1a-4f10-99f9-76ffc612eb6c@andrewg.com>
Date: Tue, 06 Oct 2026 14:26:48 +0100
MIME-Version: 1.0
User-Agent: Thunderbird Daily
To: openpgp@ietf.org
References: <_nv1qgqcXaP5sDUIslyyBuFABhgptQTJRBBY2EI0koxWJGUftToigfBMp5o3iDJKcGnUuqFAic_pZm825sGB2uUaupx20dnaWy6HqdQxLHo=@protonmail.com>
Content-Language: en-US
From: Andrew Gallagher <andrewg@andrewg.com>
Autocrypt: addr=andrewg@andrewg.com; keydata= xsFNBFHTCDIBEADiJmuYBVn/Sbk6vlPiqC4Wmi23F3Fl9NECeR8FZy98lOVrblJReueegL4Z HfOG2lN0+0Vt6SWjqqg2rZD6E2Ib8V0BST1AB7R2QoMM5wv8hmvadVKj3WO2inLM1ps8j1cB 27Rt+x8BoRCGTG+lkSLzBfk7uaTkbbk5TWys7PxRdCPYSYlznkGL9p8WK8uuN5mQwUM5MDTh 8jBpWHzUVw2HOf7yUnXR3qQzJXJpza2g2LA7eK6+DDvVPWbPmqRf5RdenborWSZjIqsFx8N5 d/DA4SmDO4CUYl8NDxFWa5ijukaPrzuuyTla5lnYJAixI7JjbJ4EUK72pcEQfA2sOnHgIbC/ M6sbU7d46xYkkVXzogoVBVVWLfP8E+ZP+ZszlWm9zjNI92wEJYKsJr0/weRDMtnS1p4qBxrb zVOIkVI5XvNINKOkreek5Mj79J4CMGX92x9sv0KMRqe+CKcz6yF90xvn7+IiZv9KjmilwZYJ diHdjDErdn/JjNp7uvXNWshxe+pqQykKNRW+/BAV2tzibLjI0KOiMxW5AIsXnfqBEaOsh0zl KoUtVDpFD2UbyVHnD1xdIpg59SpOWxWmkHF7PlM/gfQPO8HLEbYZsGeVIUat71l4y0Z17DuT vLKghNNlTpzdlUgmfQJYrIC2is+Xy6toaJCf85UqIZZ8gh3QqQARAQABzSZBbmRyZXcgR2Fs bGFnaGVyIDxhbmRyZXdnQGFuZHJld2cuY29tPsLBlwQTAQoAQQIbIwIeAQIXgAIZAQULCQgH AwUVCgkICwUWAgMBABYhBADMVMagxgFpGvSTH/tz4hrxFjk3BQJqtqxjBQkcpgsxAAoJEPtz 4hrxFjk3Ve0QALYaUaa2hDiuUSdzAShtYIguyr7khu7d1SnX1rEEWYakaL3Scsv89PZe7azm GTRmsVEjq/WWQpqr8WEJseWjWAPg3wPSS7cBPBJ+uRMgnGJlEtqVEBHuzyA+saB+brsGeHV/ 27UDhJUbF+CchscnSPDfM3XEr7k1bT8lOr1wdq+Kkvp05qgUUOoq5NHMkSLnLWFEPENGJw4z Zp3vDC38pXgMgIVWDRmn3h4LqlEqCuUy8e4UECk14wK5IXLoydh/kEgLr/rJrD9wObwurM2D XAtsKXo6mECln71shgT3xpEoZ/oAAQAkYnqVqGZ8mYt7YGsOoeiHtpHoNvSXFEnMcMWKN/A+ nA96iqkiGLgoD7PbR4/1SpYvO2tQm3tZDP/HABFk9gL1M+0Zg0CyOoe/L02C+v9bjHhHzW6O spZVLrEh68FHUjL7AlOLIpxi1yY+YHVSKm5SFAteORa6MevMGF8+BGkBM7YPQ+ZoCAFe/lkq qPwOccWSQokWBwQkJg3O2paatrdlZwGQXIDCj/OhrAsSFmegR7u9RQKTr03lDOXF2CaueySu Cyn5XniEhiUJUnSeiATD2Nq9ABxMPjtBhppNZ14k1Q63iDvpeZCj3t2qPn/OHc8a9h2RX2Vm OTNHyrNuKkBJ/Dd592Zrb4sXmqFXbZaVHeUk3z2Ai0knDAAczsFNBFHTCDIBEADWeAAZf/ks uqUjurko99tCUAztZznqUATZ6nZ7YTv1AQktoHrK7B4K7Wdt+Mwp+P0Ytqv+CuU+lLLJhkkd M2I7J5kk8M3V7mFySgSS7kaS3m2wbawxM+hQqS4W3LFLApVKQyNr46vhBvN6meYcSMcvh2X8 j5jxCkt3V9AgeKfokD1ZEZx0mFQVvMugAKFGwrBur5jPSDnvkq8LUgyRq+XPYHTkKNmlU3fz R5EiVrSSWlmdUFnJlG0giprX0rV/uGsukqZYp3JzgwpyfxAjGkpA9lRDp2kyjXTV5mCXEbwg 53sFxHJOcmt2fXXal/XWRNS4MDVd1TDYhesdEUmKWO4nwzw6CjqcrfJV5ky81k6wZNPvbY9I /RyKnEiZS8wC1igNPCoMf4IlVfzGcmspDju77EeEPAopmEyuHSxgUJwAjb/RoS5YsROJ+NET jlAHv0wyiNw9RJtgb8P16FrQ07z8oT8C3EWnGU4BcUdDULdeX2Sifannhj3yFWf1ximOXTmG D/qlmb5IDUQHaTi5eV3AxHgNynDr9IFzRbiAui1WC8iO0oi895Vibgp7xeg8KCW0CNH/g9pE /cTf/g7xU6Aj3UTyyvUILjh3ayuIPWtITDxR9tTQNIEbzqg+u5qbJbaoYmDOEVgWVrUudhkT 8xHWg9CQkOg91FMZc93A3Gj0NwARAQABwsF8BBgBCgAmAhsMFiEEAMxUxqDGAWka9JMf+3Pi GvEWOTcFAmq2rHMFCRymC0EACgkQ+3PiGvEWOTfhJg//cap2wnGkRARs3i/LCr4iz+yPdrAr ICzGSiot5eq7n/bCFtuZoQLGOLErbPK2UGO3YbeC8nJuZX/8VvVK8G6Yl3K6XK30MCrJGdkf SaGpzXaT0ydOUg/VE6MyNF4KEtdsdoOdhq1fWtf8P1Ak70L1p7EKbIA3iHUgo0RfgBDm3EEe tX5UoObZkYtgvduZ1y9X8wR+sxlRHMOEqnYoAPC5jwTplrulR3X5M0QZciErnt0bturwUYno BDVh7lpJbV/ZDW4frMhDLmgecryNCjFlKJoZ+Sv99XHX3UkJZacIA+1i0vgrd8GbaXvt+INl p9gkvCVwVwGkFAvUeqMhTVzxcCbQAfIVQWCwHGKoXMdwt8CzLb4MNLsPdujXy/RYZPwcnY3K muM/tyQgTaadeGUPVJ4OaeLFOiZa0SSf+xjgCG3OEdHn2dAGuslDl+NMJmxSRtHF1xirHU9Q lI6Xm64PjIFFrNo3w1BsAbwp4LuU+pYoK4dkxkZp0lJwGias3xRQYEjm5aw8zXaE0ah6GFy0 IehwYVzBS43CPOsAIXuvfjttAsFQXU6AcidAK957aG832qZnq+I5s/zm41oGAU0uCJFpfSW4 P3+dCkoma7VxUHr9nzcWh8DV7A9/KjKw6WI9xZ9PeAAq6bqKNry/1wBkbNJ6dozTG8Keogn8 bRkv5OI=
In-Reply-To: <_nv1qgqcXaP5sDUIslyyBuFABhgptQTJRBBY2EI0koxWJGUftToigfBMp5o3iDJKcGnUuqFAic_pZm825sGB2uUaupx20dnaWy6HqdQxLHo=@protonmail.com>
Content-Type: multipart/mixed; boundary="------------jzOutBNLVLvNcPci0V1Cn189"
X-Spamd-Bar: --
Message-ID-Hash: WUZBD6SZLCVUW7QPMPR7G4DRL4AHUB4A
X-Message-ID-Hash: WUZBD6SZLCVUW7QPMPR7G4DRL4AHUB4A
X-MailFrom: andrewg@andrewg.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-openpgp.ietf.org-0; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.10
Precedence: list
Subject: [openpgp] Re: Key selection and other semantics
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/openpgp/780-PSKUBfc8J8ec5h_jbKWbI1c>
List-Archive: <https://mailarchive.ietf.org/arch/browse/openpgp>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Owner: <mailto:openpgp-owner@ietf.org>
List-Post: <mailto:openpgp@ietf.org>
List-Subscribe: <mailto:openpgp-join@ietf.org>
List-Unsubscribe: <mailto:openpgp-leave@ietf.org>
Hey, Daniel! On 06/10/2026 12:15, Daniel Huigens wrote: > > I imagine that there's quite a lot of details that can be nitpicked > but please let me know whether the overall direction seems somewhat > reasonable. I think the overall direction looks great. :-) I'd be happy to talk about unifying your section 1 with draft-certificates (although I will have to re-read the details); I think section 3 belongs in a separate "component key selection" document, which has been discussed on previous occasions but hasn't (yet) got traction. One nit-pick: > Note: a certificate bundle as defined in this document is called a "canonical bundle" in HKPv2, while a "certificate bundle" in HKPv2 merely refers to a sequence of Transferable Public Keys, regardless of whether they belong to a single entity or not. I think we should keep a common terminology between documents. If we think the terminology currently defined in draft-hkp is suboptimal then we should probably update it before it escapes the WG... ;-) A
- [openpgp] Key selection and other semantics Daniel Huigens
- [openpgp] Re: Key selection and other semantics Andrew Gallagher
- [openpgp] Re: Key selection and other semantics Daniel Huigens