Re: Timestamp and 3rd party sig

Werner Koch <wk@gnupg.org> Thu, 17 February 2005 08:02 UTC

Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id DAA20755 for <openpgp-archive@lists.ietf.org>; Thu, 17 Feb 2005 03:02:28 -0500 (EST)
Received: from above.proper.com (localhost.vpnc.org [127.0.0.1]) by above.proper.com (8.12.11/8.12.9) with ESMTP id j1H7UUlp021428; Wed, 16 Feb 2005 23:30:30 -0800 (PST) (envelope-from owner-ietf-openpgp@mail.imc.org)
Received: (from majordom@localhost) by above.proper.com (8.12.11/8.12.9/Submit) id j1H7UUTP021427; Wed, 16 Feb 2005 23:30:30 -0800 (PST)
X-Authentication-Warning: above.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f
Received: from kerckhoffs.g10code.com (kerckhoffs.g10code.com [217.69.77.222]) by above.proper.com (8.12.11/8.12.9) with ESMTP id j1H7UL9s021290 for <ietf-openpgp@imc.org>; Wed, 16 Feb 2005 23:30:29 -0800 (PST) (envelope-from wk@gnupg.org)
Received: from uucp by kerckhoffs.g10code.com with local-rmail (Exim 4.34 #1 (Debian)) id 1D1g6P-0000Mz-MM for <ietf-openpgp@imc.org>; Thu, 17 Feb 2005 08:29:33 +0100
Received: from wk by localhost with local (Exim 4.34 #1 (Debian)) id 1D1g6K-00033x-Rj; Thu, 17 Feb 2005 08:29:28 +0100
To: Rick van Rein <rick@openfortress.nl>
Cc: ietf-openpgp@imc.org
Subject: Re: Timestamp and 3rd party sig
References: <20050216231251.GA30630@phantom.vanrein.org>
From: Werner Koch <wk@gnupg.org>
Organisation: g10 Code GmbH
OpenPGP: id=5B0358A2; url=finger:wk@g10code.com
Date: Thu, 17 Feb 2005 08:29:28 +0100
In-Reply-To: <20050216231251.GA30630@phantom.vanrein.org> (Rick van Rein's message of "Thu, 17 Feb 2005 00:12:51 +0100")
Message-ID: <87is4rwso7.fsf@wheatstone.g10code.de>
User-Agent: Gnus/5.1007 (Gnus v5.10.7) Emacs/21.3 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

On Thu, 17 Feb 2005 00:12:51 +0100, Rick van Rein said:

> A topic open for debate would be whether it may be assumed that "extra" or
> "sufficient" effort has been taken to guard and/or synchronise the time
> encapsulated.  In line with the intention of 0x10..0x13 I left this out

That would again put definitions of trust into the protocol.  OpenPGP
has always abstained from defining what trust is.

> The term 'notary seal' is a bit confusing because the strength and
> implications of such seals differ strongly between countries.

Ditto.

> The term Third Party is used a lot for key escrow parties.  Is it an idea
> to rename this to an "Independent Confirmation signature"?

Fine with me.

> In 5.2.3.25, the definition of "Signature Target" is not very accurate.
> Notably, it is not very strict about the contents being hashed.

I recall that we discussed this a long time ago but can't remember the
details anymore.



Shalom-Salam,

   Werner