[openpgp] Re: Key selection and other semantics

Daniel Huigens <d.huigens@protonmail.com> Tue, 06 October 2026 13:56 UTC

Received: from mail-43101.protonmail.ch (mail-43101.protonmail.ch [185.70.43.101]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by mx.ietf.org (Postfix) with ESMTPS id 2035A50 for <openpgp@ietf.org>; Tue, 06 Oct 2026 13:56:55 +0000 (UTC)
Authentication-Results: mx.ietf.org; dkim=pass header.d=protonmail.com header.s=protonmail3 header.b=f+Rd6aG8; spf=pass (mx.ietf.org: domain of d.huigens@protonmail.com designates 185.70.43.101 as permitted sender) smtp.mailfrom=d.huigens@protonmail.com; dmarc=pass (policy=quarantine) header.from=protonmail.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=protonmail.com; s=protonmail3; t=1791295007; x=1791554207; bh=WoFxsKRm9Y8unxX6mn3bjD+R4SnTb/XSHcEI5/fc/Sw=; h=Date:To:From:Cc:Subject:Message-ID:In-Reply-To:References: Feedback-ID:From:To:Cc:Date:Subject:Reply-To:Feedback-ID: Message-ID:BIMI-Selector; b=f+Rd6aG8sx0VGC3rTpUaFehqwYszsLvQsZMfh/K7464jlc9Rw7PSb2cvV7JfAZry7 SPBbdaknJ6ATl8RbZoLXj0gzMGfCbjSuqUC2WuyGHcmlvRrHbNRWBdLozGWLGbI45s bhx92WykkHqAUHkiOuZSLgzhpZnIU3qboLuuQDZSY2z26xTyah0agu2Hg+m9UhAKGF sGcS+R2Gc3BOp271sViaA9hMLtYvHiQGQwZ0IQllkbvSPeY3PQg0c46iBkltaxg4xU fVkM0BiH9r4gITpO0liWW25nUIRe5nLxYw84uLFblou2DQrzZkDw5pOO6X1ZRF396Z T49knkLNC7dVg==
Date: Tue, 06 Oct 2026 13:56:42 +0000
To: Andrew Gallagher <andrewg@andrewg.com>
From: Daniel Huigens <d.huigens@protonmail.com>
Message-ID: <xzS6poHCtBVGJlRw2wEHGeJctAPMS5XgEA_8TyMIWJ07xkHh97n74U4_gvG1KFlDDiQH563VSfahHuUVVexz5e0oKzL152AorN2GlhJw_lk=@protonmail.com>
In-Reply-To: <bdb7f518-2c1a-4f10-99f9-76ffc612eb6c@andrewg.com>
References: <_nv1qgqcXaP5sDUIslyyBuFABhgptQTJRBBY2EI0koxWJGUftToigfBMp5o3iDJKcGnUuqFAic_pZm825sGB2uUaupx20dnaWy6HqdQxLHo=@protonmail.com> <bdb7f518-2c1a-4f10-99f9-76ffc612eb6c@andrewg.com>
Feedback-ID: 2934448:user:proton
X-Pm-Message-ID: 889dac51fb96def8a8129908687102a4d07833ee
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-Spamd-Bar: ----
Message-ID-Hash: 7D5H3MRJCWJVVXGIK3ZYX53KNNZKEIRZ
X-Message-ID-Hash: 7D5H3MRJCWJVVXGIK3ZYX53KNNZKEIRZ
X-MailFrom: d.huigens@protonmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-openpgp.ietf.org-0; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: openpgp@ietf.org
X-Mailman-Version: 3.3.10
Precedence: list
Subject: [openpgp] Re: Key selection and other semantics
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/openpgp/GroaD1CDvjRG6VPpCT0Olzd2RE4>
List-Archive: <https://mailarchive.ietf.org/arch/browse/openpgp>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Owner: <mailto:openpgp-owner@ietf.org>
List-Post: <mailto:openpgp@ietf.org>
List-Subscribe: <mailto:openpgp-join@ietf.org>
List-Unsubscribe: <mailto:openpgp-leave@ietf.org>

Hi Andrew,

On Tuesday, October 6th, 2026 at 15:26, Andrew Gallagher wrote:
> I think the overall direction looks great. :-) I'd be happy to talk
> about unifying your section 1 with draft-certificates (although I will
> have to re-read the details); I think section 3 belongs in a separate
> "component key selection" document, which has been discussed on previous
> occasions but hasn't (yet) got traction.

Thanks! I agree :)

> I think we should keep a common terminology between documents. If we
> think the terminology currently defined in draft-hkp is suboptimal then
> we should probably update it before it escapes the WG... ;-)

Yeah, I was thinking about this as well.
I think that outside the HKPv2 draft, the term "canonical bundle"
doesn't make as much intuitive sense, because it isn't clear
what it's a bundle of (HKP only deals with certificates,
obviously, but this isn't true for other OpenPGP contexts).
So then it'd need to be "canonical certificate bundle",
but I'd prefer that to be the default, so to speak,
and use "sequence of TPKs" for a more loose collection
of certificates. If that sounds reasonable I can make an MR
to the HKPv2 draft.

Best,
Daniel