[openpgp] Re: I-D Action: draft-ietf-openpgp-replacementkey-01.txt

Andrew Gallagher <andrewg@andrewg.com> Fri, 01 November 2024 16:44 UTC

Return-Path: <andrewg@andrewg.com>
X-Original-To: openpgp@ietfa.amsl.com
Delivered-To: openpgp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B50F7C15109C for <openpgp@ietfa.amsl.com>; Fri, 1 Nov 2024 09:44:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.105
X-Spam-Level:
X-Spam-Status: No, score=-2.105 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=andrewg.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZaXylylA48Mg for <openpgp@ietfa.amsl.com>; Fri, 1 Nov 2024 09:44:00 -0700 (PDT)
Received: from fum.andrewg.com (fum.andrewg.com [135.181.198.78]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5497DC1D5302 for <openpgp@ietf.org>; Fri, 1 Nov 2024 09:43:59 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=andrewg.com; s=andrewg-com; t=1730479438; bh=wyz7CXIjHHFDIZrb4eqSNJ+JrA3L8M0TY4R5JD1Xgzc=; h=From:Subject:Date:In-Reply-To:Cc:To:References:From; b=TUtcL0SVRwGvxW4wug/NmbEKsTrALSPaiJrEyXwoPMkK8hvrXn6HhGjnnZazLSBZP 5DLjCO2ZoAK+6g9qvDCsYaDDWPP/g5XMg20MG9ru2dSOWUAp5lieh/VXNTV8kGgu5t 5bdgKW+bNyyLWGKKWkLLVZWdcOm1fQSF5OAYvhGUGm3PNJX2lmOMwmKCyDXSIRFKGI MTJfJiJVJLLIFJZAQs56WDdcYPc7R6ncab7geXvwkOf6Ow2TH2wIHRvGB2xCIxciyE XXACHggUI5rBPGmbD2nNyLYnkansLbg13nSjOWZo8OaEf0H54WxQH5Ak7nJGaNacnK pzpZrrcOwjfaQ==
Received: from smtpclient.apple (serenity [IPv6:fc93:5820:7349:eda2:99a7::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by fum.andrewg.com (Postfix) with ESMTPSA id 17E445ED3B; Fri, 1 Nov 2024 16:43:58 +0000 (UTC)
From: Andrew Gallagher <andrewg@andrewg.com>
Message-Id: <433C81BB-3D5B-498B-9888-6745B6A3F5C1@andrewg.com>
Content-Type: multipart/signed; boundary="Apple-Mail=_4CFB033B-76EB-4B10-A110-B228EFA3BBAD"; protocol="application/pgp-signature"; micalg="pgp-sha512"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3731.700.6.1.2\))
Date: Fri, 01 Nov 2024 16:32:54 +0000
In-Reply-To: <tTD49Q9CCd7cUJK2anZkb4NYq2JS5f4Krv0N3IwmyeYOl2sSotwa2uheNT4il9BzhQtx26q7Avlwufd5Zr09t0cOqa-x74MjNdrjNUE6f_o=@protonmail.com>
To: Daniel Huigens <d.huigens=40protonmail.com@dmarc.ietf.org>
References: <172954607466.2080527.11129941200377024335@dt-datatracker-78dc5ccf94-w8wgc> <B498EDD0-1FE4-405B-81AD-8E4854720B6F@andrewg.com> <F082F1E1-8779-45AA-897B-CDE8DDF95B40@andrewg.com> <tTD49Q9CCd7cUJK2anZkb4NYq2JS5f4Krv0N3IwmyeYOl2sSotwa2uheNT4il9BzhQtx26q7Avlwufd5Zr09t0cOqa-x74MjNdrjNUE6f_o=@protonmail.com>
X-Mailer: Apple Mail (2.3731.700.6.1.2)
Message-ID-Hash: CH2YB5XKN7WXXOZBKYKLM72QLFGZEZIF
X-Message-ID-Hash: CH2YB5XKN7WXXOZBKYKLM72QLFGZEZIF
X-MailFrom: andrewg@andrewg.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-openpgp.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Andrew Gallagher <andrewg=40andrewg.com@dmarc.ietf.org>, "openpgp\\\\\\\\@ietf.org" <openpgp@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [openpgp] Re: I-D Action: draft-ietf-openpgp-replacementkey-01.txt
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/openpgp/iDTUctz7BShYYEaMirEb9H4m0ww>
List-Archive: <https://mailarchive.ietf.org/arch/browse/openpgp>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Owner: <mailto:openpgp-owner@ietf.org>
List-Post: <mailto:openpgp@ietf.org>
List-Subscribe: <mailto:openpgp-join@ietf.org>
List-Unsubscribe: <mailto:openpgp-leave@ietf.org>

On 1 Nov 2024, at 15:47, Daniel Huigens <d.huigens=40protonmail.com@dmarc.ietf.org> wrote:
> 
> IMHO, this guidance assumes a fairly low-level interface, asking the
> user to manage individual TSKs, and so on.

Agreed, this is definitely a “basic-level” UX and could of course be improved upon. I could preface it with a caveat to that effect, and demote the SHOULDs to less formal language?

A