Re: [openpgp] Call for adoption of draft-gallagher-openpgp-replacementkey

[Falko Strenzke <[e-mail]>]

I think that a mechanism as suggested 
draft-gallagher-openpgp-replacementkey can take on a useful role in v6 
or PQC transition. However, like Simon, I am not entirely convinced how 
well it actually supports key transition in its current form. I don't 
feel confident enough to state support for adoption at this point, but I 
would definitely like to see this draft being further discussed and 
refined and hopefully turned into a standard at some point.

As one (maybe naive?) concrete suggestion: Might it make sense to 
provide the option to simply include the whole replacement certificate 
in the subpacket? That would address the distribution problem directly. 
Of course any concerns regarding placement of trust into the replacement 
key would remain untouched by this.

- Falko

Am 19.04.24 um 06:42 schrieb Daniel Kahn Gillmor:
> Hey OpenPGP folks--
>
> On Sat 2024-04-06 01:09:12 -0400, Daniel Kahn Gillmor wrote:
>> This message starts a two-week adoption call for Daphne Shaw and Andrew
>> Gallagher's draft-gallagher-openpgp-replacementkey.  The call for
>> adoption will end on 2024-04-20.
> This call for adoption will end tomorrow!  So far on list, we've heard
> from the editors of the draft, the chairs, Simon Josefsson, and Heiko
> Schäfer.
>
> My understanding is that the editors proposed some changes to address
> Simon's concerns about scope and use patterns, but haven't released a
> new draft with those changes.  Those proposed changes are here:
>
>    https://gitlab.com/andrewgdotcom/draft-gallagher-openpgp-replacementkey/-/merge_requests/2/diffs
>    
> If other folks from the WG are interested, now would be good time to
> weigh in about whether this draft seems worth considering as a working
> group topic.
>
> In particular:
>
>> Please review the draft and consider whether you support its adoption by
>> the WG.  Please share any thoughts with the list to indicate support or
>> opposition -- this is not a vote.
>>
>> If you are willing to provide a more in-depth review, please state it
>> explicitly to give the chairs an indication of the energy level in the
>> working group willing to work on the document.
> So far, I'm not seeing a lot of on-list commitment to review, offer
> text, or consider implementing any resulting proposals.
>
> As Stephen said, you don't need to think that draft is fully correct now
> for adoption; if you think it is a reasonable starting point for WG
> work, and it's something worth pursuing, that's what we're looking for.
>
>        --dkg
>
> _______________________________________________
> openpgp mailing list
> [e-mail]
> https://www.ietf.org/mailman/listinfo/openpgp
-- 

*MTG AG*
Dr. Falko Strenzke
Executive System Architect

Phone: [phone]
E-Mail: [e-mail]
Web: mtg.de <https://www.mtg.de>

<https://www.linkedin.com/search/results/all/?fetchDeterministicClustersOnly=true&heroEntityKey=urn%3Ali%3Aorganization%3A13983133&keywords=mtg%20ag&origin=RICH_QUERY_SUGGESTION&position=0&searchId=d5bc71c3-97f7-4cae-83e7-e9e16d497dc2&sid=3S5&spellCorrectionEnabled=false>
Follow us
------------------------------------------------------------------------
<https://www.mtg.de/de/aktuelles/MTG-AG-erhaelt-Innovationspreis-des-Bundesverbands-IT-Sicherheit-e.V-00001.-TeleTrust/> 
<https://www.itsa365.de/de-de/companies/m/mtg-ag>

MTG AG - Dolivostr. 11 - 64293 Darmstadt, Germany
Commercial register: HRB 8901
Register Court: Amtsgericht Darmstadt
Management Board: Jürgen Ruf (CEO), Tamer Kemeröz
Chairman of the Supervisory Board: Dr. Thomas Milde

This email may contain confidential and/or privileged information. If 
you are not the correct recipient or have received this email in error,
please inform the sender immediately and delete this email.Unauthorised 
copying or distribution of this email is not permitted.

Data protection information: Privacy policy 
<https://www.mtg.de/en/privacy-policy>