Re: [openpgp] Should signatures be rejected if the embedded hash prefix does not match?

[Daniel Kahn Gillmor <[e-mail]>]

On Wed 2023-03-01 12:46:26 +0000, Andrew Gallagher wrote:
> The body of a signature packet contains the prefix octets, and the above 
> only says to remove the unhashed subpacket area. So fixing up the prefix 
> octets will invalidate 0x50 sigs.

I think this is correct, but surely "do not tamper with the subject of a
signature if you want the signature to still validate" is true
*regardless* of whether the subject of the signature is itself an
OpenPGP signature or not.

Why should the working group prohibit an implementation that wants to
fix a malformed certification that is *not* covered by a 0x50 signature
or embedded in a digest-dependent chain like a git repo?

         --dkg