Received: from fum.andrewg.com (fum.andrewg.com [IPv6:2a01:4f9:c011:23ad::1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by mx.ietf.org (Postfix) with ESMTPS id BC90242 for ; Tue, 06 Oct 2026 13:26:54 +0000 (UTC) Authentication-Results: mx.ietf.org; dkim=pass header.d=andrewg.com header.s=andrewg-com header.b=OcGh9SK3; spf=pass (mx.ietf.org: domain of andrewg@andrewg.com designates 2a01:4f9:c011:23ad::1 as permitted sender) smtp.mailfrom=andrewg@andrewg.com; dmarc=pass (policy=quarantine) header.from=andrewg.com DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=andrewg.com; s=andrewg-com; t=1791293213; bh=/FaeVRMItX3/2U4CFi27/X59K1i9Xqr+wDdD5MQ5+Ig=; h=Date:Subject:To:References:From:In-Reply-To:From; b=OcGh9SK3pkoiLyMr9iJEjd9LbNGJFh8NLmYq5h7y7xRTs4ZKznMuKOcv5RuC4O+om 1scW7ttShbB65z5xJTKvoMdh6KnBbiHaUgF/uzzJdqI8I3EDUaObHdxHfW8+TlwMC1 badST+l8kWX2s8aB476BaiTTz+f8chcUefo9JQUQIlzgXGdKyn1FuHkQ3VkJZj9+iM zrdG3AfpLoGk+qZ8WkHrVO9ZMfIdH/I9U/VYyN7G9nli8EjtdN+7sS/dDrq3jbPdiz bEAGZBgEoPA1ZAY1PzIOFDoa4D+fu4VbuhuPJnSlVC8C6lbNCTqFjEK/4rinUHS4N8 7IvN0sQdNGfcw== Received: from [192.168.1.140] (unknown [176.61.115.103]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by fum.andrewg.com (Postfix) with ESMTPSA id 249115E452 for ; Tue, 06 Oct 2026 13:26:53 +0000 (UTC) Message-ID: Date: Tue, 6 Oct 2026 14:26:48 +0100 MIME-Version: 1.0 User-Agent: Thunderbird Daily To: openpgp@ietf.org References: <_nv1qgqcXaP5sDUIslyyBuFABhgptQTJRBBY2EI0koxWJGUftToigfBMp5o3iDJKcGnUuqFAic_pZm825sGB2uUaupx20dnaWy6HqdQxLHo=@protonmail.com> Content-Language: en-US From: Andrew Gallagher Autocrypt: addr=andrewg@andrewg.com; keydata= xsFNBFHTCDIBEADiJmuYBVn/Sbk6vlPiqC4Wmi23F3Fl9NECeR8FZy98lOVrblJReueegL4Z HfOG2lN0+0Vt6SWjqqg2rZD6E2Ib8V0BST1AB7R2QoMM5wv8hmvadVKj3WO2inLM1ps8j1cB 27Rt+x8BoRCGTG+lkSLzBfk7uaTkbbk5TWys7PxRdCPYSYlznkGL9p8WK8uuN5mQwUM5MDTh 8jBpWHzUVw2HOf7yUnXR3qQzJXJpza2g2LA7eK6+DDvVPWbPmqRf5RdenborWSZjIqsFx8N5 d/DA4SmDO4CUYl8NDxFWa5ijukaPrzuuyTla5lnYJAixI7JjbJ4EUK72pcEQfA2sOnHgIbC/ M6sbU7d46xYkkVXzogoVBVVWLfP8E+ZP+ZszlWm9zjNI92wEJYKsJr0/weRDMtnS1p4qBxrb zVOIkVI5XvNINKOkreek5Mj79J4CMGX92x9sv0KMRqe+CKcz6yF90xvn7+IiZv9KjmilwZYJ diHdjDErdn/JjNp7uvXNWshxe+pqQykKNRW+/BAV2tzibLjI0KOiMxW5AIsXnfqBEaOsh0zl KoUtVDpFD2UbyVHnD1xdIpg59SpOWxWmkHF7PlM/gfQPO8HLEbYZsGeVIUat71l4y0Z17DuT vLKghNNlTpzdlUgmfQJYrIC2is+Xy6toaJCf85UqIZZ8gh3QqQARAQABzSZBbmRyZXcgR2Fs bGFnaGVyIDxhbmRyZXdnQGFuZHJld2cuY29tPsLBlwQTAQoAQQIbIwIeAQIXgAIZAQULCQgH AwUVCgkICwUWAgMBABYhBADMVMagxgFpGvSTH/tz4hrxFjk3BQJqtqxjBQkcpgsxAAoJEPtz 4hrxFjk3Ve0QALYaUaa2hDiuUSdzAShtYIguyr7khu7d1SnX1rEEWYakaL3Scsv89PZe7azm GTRmsVEjq/WWQpqr8WEJseWjWAPg3wPSS7cBPBJ+uRMgnGJlEtqVEBHuzyA+saB+brsGeHV/ 27UDhJUbF+CchscnSPDfM3XEr7k1bT8lOr1wdq+Kkvp05qgUUOoq5NHMkSLnLWFEPENGJw4z Zp3vDC38pXgMgIVWDRmn3h4LqlEqCuUy8e4UECk14wK5IXLoydh/kEgLr/rJrD9wObwurM2D XAtsKXo6mECln71shgT3xpEoZ/oAAQAkYnqVqGZ8mYt7YGsOoeiHtpHoNvSXFEnMcMWKN/A+ nA96iqkiGLgoD7PbR4/1SpYvO2tQm3tZDP/HABFk9gL1M+0Zg0CyOoe/L02C+v9bjHhHzW6O spZVLrEh68FHUjL7AlOLIpxi1yY+YHVSKm5SFAteORa6MevMGF8+BGkBM7YPQ+ZoCAFe/lkq qPwOccWSQokWBwQkJg3O2paatrdlZwGQXIDCj/OhrAsSFmegR7u9RQKTr03lDOXF2CaueySu Cyn5XniEhiUJUnSeiATD2Nq9ABxMPjtBhppNZ14k1Q63iDvpeZCj3t2qPn/OHc8a9h2RX2Vm OTNHyrNuKkBJ/Dd592Zrb4sXmqFXbZaVHeUk3z2Ai0knDAAczsFNBFHTCDIBEADWeAAZf/ks uqUjurko99tCUAztZznqUATZ6nZ7YTv1AQktoHrK7B4K7Wdt+Mwp+P0Ytqv+CuU+lLLJhkkd M2I7J5kk8M3V7mFySgSS7kaS3m2wbawxM+hQqS4W3LFLApVKQyNr46vhBvN6meYcSMcvh2X8 j5jxCkt3V9AgeKfokD1ZEZx0mFQVvMugAKFGwrBur5jPSDnvkq8LUgyRq+XPYHTkKNmlU3fz R5EiVrSSWlmdUFnJlG0giprX0rV/uGsukqZYp3JzgwpyfxAjGkpA9lRDp2kyjXTV5mCXEbwg 53sFxHJOcmt2fXXal/XWRNS4MDVd1TDYhesdEUmKWO4nwzw6CjqcrfJV5ky81k6wZNPvbY9I /RyKnEiZS8wC1igNPCoMf4IlVfzGcmspDju77EeEPAopmEyuHSxgUJwAjb/RoS5YsROJ+NET jlAHv0wyiNw9RJtgb8P16FrQ07z8oT8C3EWnGU4BcUdDULdeX2Sifannhj3yFWf1ximOXTmG D/qlmb5IDUQHaTi5eV3AxHgNynDr9IFzRbiAui1WC8iO0oi895Vibgp7xeg8KCW0CNH/g9pE /cTf/g7xU6Aj3UTyyvUILjh3ayuIPWtITDxR9tTQNIEbzqg+u5qbJbaoYmDOEVgWVrUudhkT 8xHWg9CQkOg91FMZc93A3Gj0NwARAQABwsF8BBgBCgAmAhsMFiEEAMxUxqDGAWka9JMf+3Pi GvEWOTcFAmq2rHMFCRymC0EACgkQ+3PiGvEWOTfhJg//cap2wnGkRARs3i/LCr4iz+yPdrAr ICzGSiot5eq7n/bCFtuZoQLGOLErbPK2UGO3YbeC8nJuZX/8VvVK8G6Yl3K6XK30MCrJGdkf SaGpzXaT0ydOUg/VE6MyNF4KEtdsdoOdhq1fWtf8P1Ak70L1p7EKbIA3iHUgo0RfgBDm3EEe tX5UoObZkYtgvduZ1y9X8wR+sxlRHMOEqnYoAPC5jwTplrulR3X5M0QZciErnt0bturwUYno BDVh7lpJbV/ZDW4frMhDLmgecryNCjFlKJoZ+Sv99XHX3UkJZacIA+1i0vgrd8GbaXvt+INl p9gkvCVwVwGkFAvUeqMhTVzxcCbQAfIVQWCwHGKoXMdwt8CzLb4MNLsPdujXy/RYZPwcnY3K muM/tyQgTaadeGUPVJ4OaeLFOiZa0SSf+xjgCG3OEdHn2dAGuslDl+NMJmxSRtHF1xirHU9Q lI6Xm64PjIFFrNo3w1BsAbwp4LuU+pYoK4dkxkZp0lJwGias3xRQYEjm5aw8zXaE0ah6GFy0 IehwYVzBS43CPOsAIXuvfjttAsFQXU6AcidAK957aG832qZnq+I5s/zm41oGAU0uCJFpfSW4 P3+dCkoma7VxUHr9nzcWh8DV7A9/KjKw6WI9xZ9PeAAq6bqKNry/1wBkbNJ6dozTG8Keogn8 bRkv5OI= In-Reply-To: <_nv1qgqcXaP5sDUIslyyBuFABhgptQTJRBBY2EI0koxWJGUftToigfBMp5o3iDJKcGnUuqFAic_pZm825sGB2uUaupx20dnaWy6HqdQxLHo=@protonmail.com> Content-Type: multipart/mixed; boundary="------------jzOutBNLVLvNcPci0V1Cn189" X-Spamd-Bar: -- Message-ID-Hash: WUZBD6SZLCVUW7QPMPR7G4DRL4AHUB4A X-Message-ID-Hash: WUZBD6SZLCVUW7QPMPR7G4DRL4AHUB4A X-MailFrom: andrewg@andrewg.com X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-openpgp.ietf.org-0; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Mailman-Version: 3.3.10 Precedence: list Subject: [openpgp] Re: Key selection and other semantics List-Id: "Ongoing discussion of OpenPGP issues." Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: --------------jzOutBNLVLvNcPci0V1Cn189 Sig: t=p; b= iQIzBAEBCgAdFiEEKR55odxVrielLu+DXB7EBNWQZikFAmrE9xgACgkQXB7EBNWQ Zilj6Q//a2YrSdK8pZzYWs19RgUulcAufWdjNl8Qg7COLIRMe9hSTzEYkAuSv8TZ 3SSV9RWPNAh8NE0rdZPI/qnbO94zEL2Zsg1F6Vj1BtjYSR4pGAqadAzxqP4BpBeQ DqU0/7D7grOMaZHo+B2LaJ+vQLiiUdJGUBwm0r3p88b9oSl0EaYpUuNM5P9iwjtN 7D2E1/PrdB5gY1rBrHKlQbqpO2KDY4Evb0ENAdCjTUAUIQ7VQnQ7lIlqAxA6YQZN MmfKbG3Mbsu14/tDAMh7VMJ0P/6wEiCGXIALoWCweAOH60nhaUG9a3hHcOxMsfSs hDeRZk2v53FaU6sg13V1XE3JJrg8wNVLxrVp89TJHX5/veniLXkAhrbevqnfQPiP ijBPeuxImYmqLO+/vb9JhScFh9kPwOUS1/ZIMeo32jyLTgL6148fhGaXrpyEncvi XSvxDr5be0Ck2k133hrWYKRsGYBWsF8Oowq95jtT5tIfQ1RlKg2dIBTlP2cqNQ2f pEB9bbAhXloJdzCFnzU23hmQl4V+MCZm15sMaDX/Ua6X5+/BALmEdq0CSoQb5TtL S3atI/uFT1nief3hAsnCMAVJLhxXW7WeVKl/l1eGK63QTdjsEsDOA8UyPenNtDSS 6J1qVfeH3eHz+9r+bN2peGkqb3vhOI3Nqj0XqqFeW0sdjWpMQo0= Message-ID: Date: Tue, 6 Oct 2026 14:26:48 +0100 MIME-Version: 1.0 User-Agent: Thunderbird Daily Subject: Re: [openpgp] Key selection and other semantics To: openpgp@ietf.org References: <_nv1qgqcXaP5sDUIslyyBuFABhgptQTJRBBY2EI0koxWJGUftToigfBMp5o3iDJKcGnUuqFAic_pZm825sGB2uUaupx20dnaWy6HqdQxLHo=@protonmail.com> Content-Language: en-US From: Andrew Gallagher Autocrypt: addr=andrewg@andrewg.com; keydata= xsFNBFHTCDIBEADiJmuYBVn/Sbk6vlPiqC4Wmi23F3Fl9NECeR8FZy98lOVrblJReueegL4Z HfOG2lN0+0Vt6SWjqqg2rZD6E2Ib8V0BST1AB7R2QoMM5wv8hmvadVKj3WO2inLM1ps8j1cB 27Rt+x8BoRCGTG+lkSLzBfk7uaTkbbk5TWys7PxRdCPYSYlznkGL9p8WK8uuN5mQwUM5MDTh 8jBpWHzUVw2HOf7yUnXR3qQzJXJpza2g2LA7eK6+DDvVPWbPmqRf5RdenborWSZjIqsFx8N5 d/DA4SmDO4CUYl8NDxFWa5ijukaPrzuuyTla5lnYJAixI7JjbJ4EUK72pcEQfA2sOnHgIbC/ M6sbU7d46xYkkVXzogoVBVVWLfP8E+ZP+ZszlWm9zjNI92wEJYKsJr0/weRDMtnS1p4qBxrb zVOIkVI5XvNINKOkreek5Mj79J4CMGX92x9sv0KMRqe+CKcz6yF90xvn7+IiZv9KjmilwZYJ diHdjDErdn/JjNp7uvXNWshxe+pqQykKNRW+/BAV2tzibLjI0KOiMxW5AIsXnfqBEaOsh0zl KoUtVDpFD2UbyVHnD1xdIpg59SpOWxWmkHF7PlM/gfQPO8HLEbYZsGeVIUat71l4y0Z17DuT vLKghNNlTpzdlUgmfQJYrIC2is+Xy6toaJCf85UqIZZ8gh3QqQARAQABzSZBbmRyZXcgR2Fs bGFnaGVyIDxhbmRyZXdnQGFuZHJld2cuY29tPsLBlwQTAQoAQQIbIwIeAQIXgAIZAQULCQgH AwUVCgkICwUWAgMBABYhBADMVMagxgFpGvSTH/tz4hrxFjk3BQJqtqxjBQkcpgsxAAoJEPtz 4hrxFjk3Ve0QALYaUaa2hDiuUSdzAShtYIguyr7khu7d1SnX1rEEWYakaL3Scsv89PZe7azm GTRmsVEjq/WWQpqr8WEJseWjWAPg3wPSS7cBPBJ+uRMgnGJlEtqVEBHuzyA+saB+brsGeHV/ 27UDhJUbF+CchscnSPDfM3XEr7k1bT8lOr1wdq+Kkvp05qgUUOoq5NHMkSLnLWFEPENGJw4z Zp3vDC38pXgMgIVWDRmn3h4LqlEqCuUy8e4UECk14wK5IXLoydh/kEgLr/rJrD9wObwurM2D XAtsKXo6mECln71shgT3xpEoZ/oAAQAkYnqVqGZ8mYt7YGsOoeiHtpHoNvSXFEnMcMWKN/A+ nA96iqkiGLgoD7PbR4/1SpYvO2tQm3tZDP/HABFk9gL1M+0Zg0CyOoe/L02C+v9bjHhHzW6O spZVLrEh68FHUjL7AlOLIpxi1yY+YHVSKm5SFAteORa6MevMGF8+BGkBM7YPQ+ZoCAFe/lkq qPwOccWSQokWBwQkJg3O2paatrdlZwGQXIDCj/OhrAsSFmegR7u9RQKTr03lDOXF2CaueySu Cyn5XniEhiUJUnSeiATD2Nq9ABxMPjtBhppNZ14k1Q63iDvpeZCj3t2qPn/OHc8a9h2RX2Vm OTNHyrNuKkBJ/Dd592Zrb4sXmqFXbZaVHeUk3z2Ai0knDAAczsFNBFHTCDIBEADWeAAZf/ks uqUjurko99tCUAztZznqUATZ6nZ7YTv1AQktoHrK7B4K7Wdt+Mwp+P0Ytqv+CuU+lLLJhkkd M2I7J5kk8M3V7mFySgSS7kaS3m2wbawxM+hQqS4W3LFLApVKQyNr46vhBvN6meYcSMcvh2X8 j5jxCkt3V9AgeKfokD1ZEZx0mFQVvMugAKFGwrBur5jPSDnvkq8LUgyRq+XPYHTkKNmlU3fz R5EiVrSSWlmdUFnJlG0giprX0rV/uGsukqZYp3JzgwpyfxAjGkpA9lRDp2kyjXTV5mCXEbwg 53sFxHJOcmt2fXXal/XWRNS4MDVd1TDYhesdEUmKWO4nwzw6CjqcrfJV5ky81k6wZNPvbY9I /RyKnEiZS8wC1igNPCoMf4IlVfzGcmspDju77EeEPAopmEyuHSxgUJwAjb/RoS5YsROJ+NET jlAHv0wyiNw9RJtgb8P16FrQ07z8oT8C3EWnGU4BcUdDULdeX2Sifannhj3yFWf1ximOXTmG D/qlmb5IDUQHaTi5eV3AxHgNynDr9IFzRbiAui1WC8iO0oi895Vibgp7xeg8KCW0CNH/g9pE /cTf/g7xU6Aj3UTyyvUILjh3ayuIPWtITDxR9tTQNIEbzqg+u5qbJbaoYmDOEVgWVrUudhkT 8xHWg9CQkOg91FMZc93A3Gj0NwARAQABwsF8BBgBCgAmAhsMFiEEAMxUxqDGAWka9JMf+3Pi GvEWOTcFAmq2rHMFCRymC0EACgkQ+3PiGvEWOTfhJg//cap2wnGkRARs3i/LCr4iz+yPdrAr ICzGSiot5eq7n/bCFtuZoQLGOLErbPK2UGO3YbeC8nJuZX/8VvVK8G6Yl3K6XK30MCrJGdkf SaGpzXaT0ydOUg/VE6MyNF4KEtdsdoOdhq1fWtf8P1Ak70L1p7EKbIA3iHUgo0RfgBDm3EEe tX5UoObZkYtgvduZ1y9X8wR+sxlRHMOEqnYoAPC5jwTplrulR3X5M0QZciErnt0bturwUYno BDVh7lpJbV/ZDW4frMhDLmgecryNCjFlKJoZ+Sv99XHX3UkJZacIA+1i0vgrd8GbaXvt+INl p9gkvCVwVwGkFAvUeqMhTVzxcCbQAfIVQWCwHGKoXMdwt8CzLb4MNLsPdujXy/RYZPwcnY3K muM/tyQgTaadeGUPVJ4OaeLFOiZa0SSf+xjgCG3OEdHn2dAGuslDl+NMJmxSRtHF1xirHU9Q lI6Xm64PjIFFrNo3w1BsAbwp4LuU+pYoK4dkxkZp0lJwGias3xRQYEjm5aw8zXaE0ah6GFy0 IehwYVzBS43CPOsAIXuvfjttAsFQXU6AcidAK957aG832qZnq+I5s/zm41oGAU0uCJFpfSW4 P3+dCkoma7VxUHr9nzcWh8DV7A9/KjKw6WI9xZ9PeAAq6bqKNry/1wBkbNJ6dozTG8Keogn8 bRkv5OI= In-Reply-To: <_nv1qgqcXaP5sDUIslyyBuFABhgptQTJRBBY2EI0koxWJGUftToigfBMp5o3iDJKcGnUuqFAic_pZm825sGB2uUaupx20dnaWy6HqdQxLHo=@protonmail.com> Content-Type: text/plain; charset=UTF-8; format=flowed; hp="clear" Content-Transfer-Encoding: 7bit Hey, Daniel! On 06/10/2026 12:15, Daniel Huigens wrote: > > I imagine that there's quite a lot of details that can be nitpicked > but please let me know whether the overall direction seems somewhat > reasonable. I think the overall direction looks great. :-) I'd be happy to talk about unifying your section 1 with draft-certificates (although I will have to re-read the details); I think section 3 belongs in a separate "component key selection" document, which has been discussed on previous occasions but hasn't (yet) got traction. One nit-pick: > Note: a certificate bundle as defined in this document is called a "canonical bundle" in HKPv2, while a "certificate bundle" in HKPv2 merely refers to a sequence of Transferable Public Keys, regardless of whether they belong to a single entity or not. I think we should keep a common terminology between documents. If we think the terminology currently defined in draft-hkp is suboptimal then we should probably update it before it escapes the WG... ;-) A --------------jzOutBNLVLvNcPci0V1Cn189--