[openpgp] Re: Key and Certificate Management in SOP

[Daniel Kahn Gillmor <[e-mail]>]

On Fri 2024-09-06 15:57:44 +0000, Heiko Schäfer wrote:
>  From that perspective, I'm concerned about the command name 
> "validate-certs". While the command deals with "Certificates", it seems 
> to mostly be concerned with "User IDs" (and signature packets). So based 
> on our discussion just now, I think it would be good to replace the 
> "cert" fragmentwith "userid".Something like "sop validate-userids" would 
> strike me as strictly less potentially confusing.

This is a good idea, thanks!  In git, I've renamed them to:

   sop certify-userid and
   sop validate-userid

As you can see, I ended up reverting to the singular (even though it's
possible to use the commands with more than one User ID), in line with
the way that extract-cert also uses the singular, even though it can
extract more than one cert.

I also moved this pair of subcommands into their own subsection: User
Identity Subcommands.

And, i got more good feedback from Daniel Huigens via gitlab, which
helped me clean up some of my mistakes.  Thanks for that!

I welcome more feedback and suggestions before i release a draft.  It's
already much better than what i'd initially written.

        --dkg