Re: [openpgp] Revoking Keys: Adding a superceded-by parameter

["Neal H. Walfield" <[e-mail]>]

Hi,

At Wed, 22 Jul 2015 01:13:16 +0200,
Daniel Kahn Gillmor wrote:
> 
> On Mon 2015-07-20 22:03:04 +0200, Neal H. Walfield wrote:
> > At Mon, 20 Jul 2015 17:14:18 +0200, Werner Koch wrote:
> >> On Mon, 20 Jul 2015 12:27, [e-mail] said:
> >> 
> >> > I propose that the description field be augmented to include optional
> >> > email style headers.  Further, we specify the following header to
> >> > specify the new key:
> >> >
> >> >   Superceded-by: fingerprint
> >> 
> >> I think it is better to have a signature subpacket or notation data to
> >> the same effect.  This has the advantage that it can also be used with a
> >> non-revoked key or data signature to declare a plan to supercede a key
> >> in the near future.
> >
> > This is a good point.  Either approach that you propose seems
> > reasonable to me.
> 
> This is a great idea.  Can you suggest a patch to the 4880bis draft that
> Werner started?

I decided to use a notation rather than a new signature subpacket.
This is because the signature subpacket namespace is tiny compared to
the notation data's namespace.

Please let me know how I can improve this.

Thanks!

:) Neal

From 6160a4f49c23b35f8cc7105197ecb145aa6be9ad Mon Sep 17 00:00:00 2001
From: "Neal H. Walfield" <[e-mail]>
Date: Sat, 25 Jul 2015 17:42:23 +0200
Subject: [PATCH] RFC4880bis: Describe the superseceded-by notation.

---
 misc/id/rfc4880bis/middle.mkd | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/misc/id/rfc4880bis/middle.mkd b/misc/id/rfc4880bis/middle.mkd
index 80c0a61..6465019 100644
--- a/misc/id/rfc4880bis/middle.mkd
+++ b/misc/id/rfc4880bis/middle.mkd
@@ -1317,6 +1317,18 @@ addresses.
 If there is a critical notation, the criticality applies to that
 specific notation and not to notations in general.
 
+The following notations are currently defined:
+
+       superseded-by: This notation is used within a "Reason for
+       Revocation" subpacket to indicate the key that superscedes this
+       one.  The value of the notation SHOULD be an OpenPGP message
+       containing the fingerprint of the new key printed in
+       hexadecimal form and signed with the new key.  If no key
+       supersedes this key, the value may instead be the 4 character
+       ASCII string "none".  This notation should only be respected if
+       the "Reason for Revocation" subpacket does not indicate that
+       the key was compromised (code: 2).
+
 #### {5.2.3.17} Key Server Preferences
 
 (N octets of flags)
-- 
2.1.4