Return-Path: X-Original-To: openpgp@ietfa.amsl.com Delivered-To: openpgp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5A23CC151083; Fri, 13 Sep 2024 04:48:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.105 X-Spam-Level: X-Spam-Status: No, score=-7.105 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=pm.me Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vW8jy1OCnajp; Fri, 13 Sep 2024 04:48:48 -0700 (PDT) Received: from mail-40133.protonmail.ch (mail-40133.protonmail.ch [185.70.40.133]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0EF8AC151095; Fri, 13 Sep 2024 04:48:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pm.me; s=protonmail3; t=1726228126; x=1726487326; bh=RkbIR/pHgH8QldhExN4i54g9bGKw7w1EFC9/066wDhk=; h=Date:To:From:Cc:Subject:Message-ID:In-Reply-To:References: Feedback-ID:From:To:Cc:Date:Subject:Reply-To:Feedback-ID: Message-ID:BIMI-Selector; b=LqcNB4mzz3fIe3VGVagjSloFNoLARubkow9+7jQ6NGantVNGDKslEYUOvz6cXT3/k MD3JoF4ABTRh2TjnL7UiSKVrTaPbyvKQXcCfwUfSlcofWlyT5Yeuyagk1Z0//q78Um t+60IbeUhS6T3tTDYpkEOlTQLsErexcdcMe1b3sxRjX+VzNnJOp0235qQFyIR43HvJ dWEkTgYAeDLVyVRKOPyJQ0yYFO91T4PXQwi5Qn5S6RWD5vAK815fHsY98gUv56SiTf FkZpZKjVZ4lqfFm40wvz5dnqBYmq75KcozJnA4d8KAwMKRYSUnV9iKjtTa9s+cYnW6 rqxN1faOZdEOA== Date: Fri, 13 Sep 2024 11:48:40 +0000 To: Andrew Gallagher From: Bart Butler Message-ID: <8dasmNRbHHCaM5m_appBMcCDLKuk4fT1CMnWZMmzAK77m_C4lRKIR1dlYqBzL9zW5CdFXUfv5LPuU46w5uMEGMtnN-cCxJaeGRzks0gQYC0=@pm.me> In-Reply-To: <5ED82E08-5973-4C4D-8726-49B24646DF2D@andrewg.com> References: <5ED82E08-5973-4C4D-8726-49B24646DF2D@andrewg.com> Feedback-ID: 5683226:user:proton X-Pm-Message-ID: e12c2aa6a2d526a47fbf1cac7d7580955ada84ff MIME-Version: 1.0 Content-Type: multipart/signed; protocol="application/pgp-signature"; micalg=pgp-sha256; boundary="------1f9d0107b5c5ef50f3daa03102e785f02ee4ebaf68ebaff933a160939d53251c"; charset=utf-8 Message-ID-Hash: IBYHLZFCCZ2GTCSEOWZM4HVF2U2Z5X2D X-Message-ID-Hash: IBYHLZFCCZ2GTCSEOWZM4HVF2U2Z5X2D X-MailFrom: bart+ietf@pm.me X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-openpgp.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header CC: Bart Butler , Daniel Huigens , Justus Winter , "draft-ietf-openpgp-replacementkey@ietf.org" , "openpgp\\@ietf.org" X-Mailman-Version: 3.3.9rc4 Precedence: list Subject: =?utf-8?q?=5Bopenpgp=5D_Re=3A_Splitting_replacement_keys_subpacket_into_rela?= =?utf-8?q?ted_keys_and_trust_equivalence=3F?= List-Id: "Ongoing discussion of OpenPGP issues." Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------1f9d0107b5c5ef50f3daa03102e785f02ee4ebaf68ebaff933a160939d53251c Content-Type: multipart/mixed;boundary=e348d56f0c9373003749736d3ab8aa5ae4252a17 --e348d56f0c9373003749736d3ab8aa5ae4252a17 Content-Type: multipart/alternative;boundary=b43a3be609e779e42a0be70cf738328bc699318a --b43a3be609e779e42a0be70cf738328bc699318a Content-Transfer-Encoding: quoted-printable Content-Type: text/plain;charset=utf-8 I=E2=80=99m fairly agnostic on this as long as we don=E2=80=99t make it opt= ional and introduce yet another degree of freedom. One other advantage of n= ot including the fingerprint would be to force implementations to verify us= ing the imprint. But either approach is fine. = On Fri, Sep 13, 2024 at 11:01 AM, Andrew Gallagher <andrewg=3D40andrewg.= com@dmarc.ietf.org> wrote: On 13 Sep 2024, at 08:42, Daniel Huigens <= ;d.huigens@protonmail.com> wrote: > > In the email case specifically, you _could_ take it as a signal to say= , > "oh there's a replacement key, but I don't know where/which it is, > so I need to go fetch this contact's keys again (by email address)". Sure, but I=E2=80=99m thinking specifically of the cases where lookup by em= ail address isn=E2=80=99t efficient, e.g. if there is no WKD on the domain = and there are a number of fake keys on the keyservers. If we compare with t= he design goal of trying to match the behaviour of subkeys as much as possi= ble, leaving out fingerprints does complicate the lookup process in the gen= eral case. A _______________________________________________ openpgp mailing list -- openpgp@ietf.org To unsubscribe send an email to openpgp-leave@ietf.org --b43a3be609e779e42a0be70cf738328bc699318a Content-Type: multipart/related;boundary=77bb677b877b32e35c9af88166aa5eb3ca1825d8 --77bb677b877b32e35c9af88166aa5eb3ca1825d8 Content-Type: text/html;charset=utf-8 Content-Transfer-Encoding: base64 PGh0bWw+PGhlYWQ+PC9oZWFkPjxib2R5PiAgIDxkaXYgZGlyPSJhdXRvIj5J4oCZ bSBmYWlybHkgYWdub3N0aWMgb24gdGhpcyBhcyBsb25nIGFzIHdlIGRvbuKAmXQg bWFrZSBpdCBvcHRpb25hbCBhbmQgaW50cm9kdWNlIHlldCBhbm90aGVyIGRlZ3Jl ZSBvZiBmcmVlZG9tLiBPbmUgb3RoZXIgYWR2YW50YWdlIG9mIG5vdCBpbmNsdWRp bmcgdGhlIGZpbmdlcnByaW50IHdvdWxkIGJlIHRvIGZvcmNlIGltcGxlbWVudGF0 aW9ucyB0byB2ZXJpZnkgdXNpbmcgdGhlIGltcHJpbnQuIEJ1dCBlaXRoZXIgYXBw cm9hY2ggaXMgZmluZS48L2Rpdj4gIDxkaXY+PGJyPjwvZGl2PjxkaXY+PGJyPjwv ZGl2Pk9uIEZyaSwgU2VwIDEzLCAyMDI0IGF0IDExOjAxIEFNLCBBbmRyZXcgR2Fs bGFnaGVyICZsdDs8YSBjbGFzcz0iIiBocmVmPSJtYWlsdG86T24gRnJpLCBTZXAg MTMsIDIwMjQgYXQgMTE6MDEgQU0sIEFuZHJldyBHYWxsYWdoZXIgPDxhIGhyZWY9 Ij5hbmRyZXdnPTQwYW5kcmV3Zy5jb21AZG1hcmMuaWV0Zi5vcmc8L2E+Jmd0OyB3 cm90ZTo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0icHJvdG9ubWFpbF9x dW90ZSI+ICBPbiAxMyBTZXAgMjAyNCwgYXQgMDg6NDIsIERhbmllbCBIdWlnZW5z ICZsdDtkLmh1aWdlbnNAcHJvdG9ubWFpbC5jb20mZ3Q7IHdyb3RlOjxicj4mZ3Q7 PGJyPiZndDsgSW4gdGhlIGVtYWlsIGNhc2Ugc3BlY2lmaWNhbGx5LCB5b3UgX2Nv dWxkXyB0YWtlIGl0IGFzIGEgc2lnbmFsIHRvIHNheSw8YnI+Jmd0OyAib2ggdGhl cmUncyBhIHJlcGxhY2VtZW50IGtleSwgYnV0IEkgZG9uJ3Qga25vdyB3aGVyZS93 aGljaCBpdCBpcyw8YnI+Jmd0OyBzbyBJIG5lZWQgdG8gZ28gZmV0Y2ggdGhpcyBj b250YWN0J3Mga2V5cyBhZ2FpbiAoYnkgZW1haWwgYWRkcmVzcykiLjxicj48YnI+ U3VyZSwgYnV0IEnigJltIHRoaW5raW5nIHNwZWNpZmljYWxseSBvZiB0aGUgY2Fz ZXMgd2hlcmUgbG9va3VwIGJ5IGVtYWlsIGFkZHJlc3MgaXNu4oCZdCBlZmZpY2ll bnQsIGUuZy4gaWYgdGhlcmUgaXMgbm8gV0tEIG9uIHRoZSBkb21haW4gYW5kIHRo ZXJlIGFyZSBhIG51bWJlciBvZiBmYWtlIGtleXMgb24gdGhlIGtleXNlcnZlcnMu IElmIHdlIGNvbXBhcmUgd2l0aCB0aGUgZGVzaWduIGdvYWwgb2YgdHJ5aW5nIHRv IG1hdGNoIHRoZSBiZWhhdmlvdXIgb2Ygc3Via2V5cyBhcyBtdWNoIGFzIHBvc3Np YmxlLCBsZWF2aW5nIG91dCBmaW5nZXJwcmludHMgZG9lcyBjb21wbGljYXRlIHRo ZSBsb29rdXAgcHJvY2VzcyBpbiB0aGUgZ2VuZXJhbCBjYXNlLjxicj48YnI+QTxi cj5fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f Xzxicj5vcGVucGdwIG1haWxpbmcgbGlzdCAtLSBvcGVucGdwQGlldGYub3JnPGJy PlRvIHVuc3Vic2NyaWJlIHNlbmQgYW4gZW1haWwgdG8gb3BlbnBncC1sZWF2ZUBp ZXRmLm9yZzxicj48L2Jsb2NrcXVvdGU+PC9ib2R5PjwvaHRtbD4= --77bb677b877b32e35c9af88166aa5eb3ca1825d8-- --b43a3be609e779e42a0be70cf738328bc699318a-- --e348d56f0c9373003749736d3ab8aa5ae4252a17-- --------1f9d0107b5c5ef50f3daa03102e785f02ee4ebaf68ebaff933a160939d53251c Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: ProtonMail wnUEARYIACcFAmbkJokJEJkFRGXvMx5EFiEEPBWRN4GH7qbKJ/qsmQVEZe8z HkQAAGnGAP9xLJF9NkEX5CWsqaZILAmDSKdGUd47QytpMUp6fgwNWAD+LQQ1 TJkKrzxOFKGcaCpM3vC+Osf81AOiSA5k87Kdeg4= =B7A8 -----END PGP SIGNATURE----- --------1f9d0107b5c5ef50f3daa03102e785f02ee4ebaf68ebaff933a160939d53251c--