Re: [openpgp] To bind or not to bind

[Kai Engert <[e-mail]>]

On 22.03.24 19:06, Justus Winter wrote:
>> Users of both v4-pqc and v6 keys would equally have the problem that
>> they need to provide classic v4 keys for their incompatible correspondents.
>>
>> However, if v4-pqc is allowed, it might allow some implementations to
>> become compatible with pqc more easily.
> 
> That seems to be optimistic speculation, whereas the data says that such
> a cert is not a viable opportunistic upgrade path.

We don't have data on what today's intolerant implementations would do 
when their users were commonly faced with users complaining about 
nonworking keys.

Given that we don't have that data, all we can do is speculate.

I don't know whether today's intolerant implementations will fix the 
intolerance bug when users complain that they cannot use their 
correspondent's keys.

But implementing such a compatibility fix can probably be done much more 
easily and quickly by implementations than adding support for v6 keys.

If we start with v4-pqc keys, it might push implementations to improve 
their treatment of unsupported keys in general, and check which keys 
they can support easily.

And they probably can add support for v4-pqc keys, at least in a 
non-breaking tolerant way, much more easily.

Kai