Re: [openpgp] Fingerprints

Christoph Anton Mitterer <calestyo@scientia.net> Sat, 25 April 2015 00:36 UTC

Return-Path: <calestyo@scientia.net>
X-Original-To: openpgp@ietfa.amsl.com
Delivered-To: openpgp@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 85E8D1B31D2 for <openpgp@ietfa.amsl.com>; Fri, 24 Apr 2015 17:36:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level:
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x6ERqCdD0JCh for <openpgp@ietfa.amsl.com>; Fri, 24 Apr 2015 17:36:02 -0700 (PDT)
Received: from mailgw02.dd24.net (mailgw-02.dd24.net [193.46.215.43]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 09E951AD08F for <openpgp@ietf.org>; Fri, 24 Apr 2015 17:36:02 -0700 (PDT)
Received: from mailpolicy-01.live.igb.homer.key-systems.net (mailpolicy-01.live.igb.homer.key-systems.net [192.168.1.26]) by mailgw02.dd24.net (Postfix) with ESMTP id AFE205FAE6; Sat, 25 Apr 2015 00:36:00 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at mailpolicy-01.live.igb.homer.key-systems.net
Received: from mailgw02.dd24.net ([192.168.1.36]) by mailpolicy-01.live.igb.homer.key-systems.net (mailpolicy-01.live.igb.homer.key-systems.net [192.168.1.25]) (amavisd-new, port 10236) with ESMTP id kqXahigEUjdh; Sat, 25 Apr 2015 00:35:58 +0000 (UTC)
Received: from heisenberg.scientia.net (p579DF58E.dip0.t-ipconnect.de [87.157.245.142]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mailgw02.dd24.net (Postfix) with ESMTPSA; Sat, 25 Apr 2015 00:35:58 +0000 (UTC)
Message-ID: <1429922158.4659.43.camel@scientia.net>
From: Christoph Anton Mitterer <calestyo@scientia.net>
To: Jon Callas <jon@callas.org>
Date: Sat, 25 Apr 2015 02:35:58 +0200
In-Reply-To: <2142458E-1636-4E3B-8CCE-36078AFC02C9@callas.org>
References: <CAMm+LwhbB+-MnGRBCvprgAGOuu+5CJ2rgod7EBGOQR5UNVrspQ@mail.gmail.com> <87d232lkb6.fsf@alice.fifthhorseman.net> <sjmlhhmakxp.fsf@securerf.ihtfp.org> <1429543533.24823.73.camel@scientia.net> <2142458E-1636-4E3B-8CCE-36078AFC02C9@callas.org>
Content-Type: multipart/signed; micalg="sha-512"; protocol="application/x-pkcs7-signature"; boundary="=-KyREjQIHwLZZFRIjppsW"
X-Mailer: Evolution 3.12.9-1+b1
Mime-Version: 1.0
Archived-At: <http://mailarchive.ietf.org/arch/msg/openpgp/ZzmG5kFyfAQyi1wvUm91te7FCJc>
Cc: openpgp@ietf.org
Subject: Re: [openpgp] Fingerprints
X-BeenThere: openpgp@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/openpgp>, <mailto:openpgp-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/openpgp/>
List-Post: <mailto:openpgp@ietf.org>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/openpgp>, <mailto:openpgp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 25 Apr 2015 00:36:03 -0000

On Fri, 2015-04-24 at 12:11 -0700, Jon Callas wrote: 
> > And specifying a expiration time (even if it's 0) should be mandatory.
> That's there now.
Again, I don't see where this would be specified, except for the
deprecated v3 keys.

It's not part of the v4 keys, and I can't recall a section which makes
the key exp sig subpacket mandatory.


Anyway, the idea for making it mandatory has less to do with the
immutable vs. mutable question... it's rather based on the idea that we
should IMHO try to strengthen and clarify the whole message format.
E.g. I think we should convert the critical-bit to be a non-critical
bit. e.g. everything is considered critical unless explicitly specified
not to be.


Cheers,
Chris.