Re: [openpgp] Should signatures be rejected if the embedded hash prefix does not match?

[Paul Wouters <[e-mail]>]

On Mon, 27 Feb 2023, Justus Winter wrote:

(speaking as individual)

> I think the takeaway should be:
>
> - Downstream users: Be diligent when selecting an OpenPGP
>  implementation.
> - Implementers: Engage in the standardization and interop testing
>  process.
> - Standards body: Require consumers to be strict to avoid this kind of
>  mess.
>
> What is it that you think we should take away from this?

That makes sense from T=0, but not at T=2 when a significant market
share is affected.

I would argue to only make v6 strict. It is new, and hopefully the
implementers behind the github code will at least implement that
one correctly if we point this out clearly in the RFC that not doing
so will cause failure.

Paul