Return-Path: X-Original-To: openpgp@ietfa.amsl.com Delivered-To: openpgp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0FC3921F8445 for ; Sat, 5 Jan 2013 15:22:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vsrmJzAht+W9 for ; Sat, 5 Jan 2013 15:22:12 -0800 (PST) Received: from che.mayfirst.org (che.mayfirst.org [209.234.253.108]) by ietfa.amsl.com (Postfix) with ESMTP id 8F1BE21F8444 for ; Sat, 5 Jan 2013 15:22:12 -0800 (PST) Received: from [192.168.42.104] (h-67-101-156-50.nycmny83.dynamic.covad.net [67.101.156.50]) by che.mayfirst.org (Postfix) with ESMTPSA id 3169FF970; Sat, 5 Jan 2013 18:22:09 -0500 (EST) Message-ID: <50E8B59C.4010807@fifthhorseman.net> Date: Sat, 05 Jan 2013 18:22:04 -0500 From: Daniel Kahn Gillmor User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/17.0 Icedove/17.0 MIME-Version: 1.0 To: Werner Koch References: <50E530D6.6020609@brainhub.org> <50E5494E.6090905@iang.org> <50E60748.3040103@brainhub.org> <50E60F7A.8000001@fifthhorseman.net> <50E61BF7.4020905@brainhub.org> <50E88141.1030907@iang.org> <87vcbb9qpu.fsf@vigenere.g10code.de> In-Reply-To: <87vcbb9qpu.fsf@vigenere.g10code.de> X-Enigmail-Version: 1.5 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="----enig2OBKWOHLBFKMLBHWAKMSN" Cc: openpgp@ietf.org, ianG Subject: Re: [openpgp] Fingerprints and their collisions resistance X-BeenThere: openpgp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: "Ongoing discussion of OpenPGP issues." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 05 Jan 2013 23:22:13 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) ------enig2OBKWOHLBFKMLBHWAKMSN Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On 01/05/2013 06:04 PM, Werner Koch wrote: > On Sat, 5 Jan 2013 20:38, iang@iang.org said: >=20 >> Fingerprints aren't really for the wire, and if you use them for the >> wire, you're exercising your right to develop your own security model >> and threat model. For my money - don't do that. >=20 > The fingerprint is used for an revocation key (5.2.3.15). However, you= r > policy may simply disallow the use of a revocation key if this is a > threat to you. iirc, there was a rough consensus within this working group that this was probably a mistake in RFC 4880, and any future revision of the draft should place the full key material into the revocation key subpacket instead of the key's fingerprint. --dkg ------enig2OBKWOHLBFKMLBHWAKMSN Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Icedove - http://www.enigmail.net/ iQJ8BAEBCgBmBQJQ6LWcXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQwRUU1QkU5NzkyODJEODBCOUY3NTQwRjFD Q0QyRUQ5NEQyMTczOUU5AAoJEMzS7ZTSFznp0qkP/RO2v4tzdXw0QgEsIhpJ8aiX kSCs/boHzlrD1TraZ8mg1wTYRiym1d2yydtelu0yrheSY0CNg7yOQUtj0/PHAf5N TXsgyiT4sbRK2EJ6DFCN589Mg39+I+OLhT6FEnWPjJxiWEtm7fanLgUELKWjBSPH slfZQaYG8gQfqXdyEH1IDgEuhLaFA1psasU8IZDWjQagHHa8nh00lTWWVC7CFWKP JwccRKpfWnOxm56YHsRMUi6oAv+TybI8l4fzdN4JFLl68c2TGdmqt4UcDEBojQeL oa2hXjhPRkNaYiozMpNOwmz1V/ZZBmg2Qruo2yIbd/+ipLoa96V0rthr5NjTZkC3 U0Vf/X6LLU/hHOIVc4nl+Y9BonDNxb0vNdJtLIF//SHVt5LOpwoRWv+1koH73PEj A3ZQ7P/S8sVPi+W6Rx3YxivUQ9CPen+KR06xCbsYQ9Ppo0/l98RyDsdTUtlS1m8V 7lbmwOUUOb0iJDwdW+EDI5JRoJ+gcB5H23unnn6ZoZXedlZQAAs5ZgEBCxaKmkNP 58qbfhJ7tBNKtDyQ/BszHuhgZ5XqefwUjsuc8r95axi3JmRQKSmmJ+bdiQbO/+ez mveHVjMJ5h/X5KF63CgplyjpoJEGK8WfwifvvukkioPOA2IruKv/R3XAJRxBa1iH HD+rQciTc7WDHr1Ig5iB =gKaK -----END PGP SIGNATURE----- ------enig2OBKWOHLBFKMLBHWAKMSN--