Re: [openpgp] Revoking Keys: Adding a superceded-by parameter

Werner Koch <wk@gnupg.org> Sun, 26 July 2015 10:05 UTC

Return-Path: <wk@gnupg.org>
X-Original-To: openpgp@ietfa.amsl.com
Delivered-To: openpgp@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E023F1A1B86 for <openpgp@ietfa.amsl.com>; Sun, 26 Jul 2015 03:05:27 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, WEIRD_PORT=0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ArbMZqDInT1x for <openpgp@ietfa.amsl.com>; Sun, 26 Jul 2015 03:05:25 -0700 (PDT)
Received: from kerckhoffs.g10code.com (kerckhoffs.g10code.com [IPv6:2001:aa8:fff1:100::22]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 320B91A9029 for <openpgp@ietf.org>; Sun, 26 Jul 2015 03:05:25 -0700 (PDT)
Received: from uucp by kerckhoffs.g10code.com with local-rmail (Exim 4.80 #2 (Debian)) id 1ZJIo7-0007Av-Kq for <openpgp@ietf.org>; Sun, 26 Jul 2015 12:05:23 +0200
Received: from wk by vigenere.g10code.de with local (Exim 4.84 #3 (Debian)) id 1ZJIlD-00034Z-6p; Sun, 26 Jul 2015 12:02:23 +0200
From: Werner Koch <wk@gnupg.org>
To: Vincent Breitmoser <look@my.amazin.horse>
References: <87wpxvjf9d.wl-neal@walfield.org> <87d1zmlv3p.fsf@vigenere.g10code.de> <87twsyk35z.wl-neal@walfield.org> <87y4i9je9f.fsf@alice.fifthhorseman.net> <87h9osnswg.wl-neal@walfield.org> <874mks7yx1.fsf@littlepip.fritz.box>
Organisation: g10 Code GmbH
X-message-flag: Mails containing HTML will not be read! Please send only plain text.
OpenPGP: id=F2AD85AC1E42B367; url=finger:wk@g10code.com
Mail-Followup-To: Vincent Breitmoser <look@my.amazin.horse>, "Neal H. Walfield" <neal@walfield.org>, IETF OpenPGP <openpgp@ietf.org>, Daniel Kahn Gillmor <dkg@fifthhorseman.net>
Date: Sun, 26 Jul 2015 12:02:22 +0200
In-Reply-To: <874mks7yx1.fsf@littlepip.fritz.box> (Vincent Breitmoser's message of "Sat, 25 Jul 2015 22:41:30 +0200")
Message-ID: <878ua39qz5.fsf@vigenere.g10code.de>
User-Agent: Gnus/5.13 (Gnus v5.13)
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Archived-At: <http://mailarchive.ietf.org/arch/msg/openpgp/qO-e5YZJNvE7iDY_-rZoI2gYc0w>
Cc: IETF OpenPGP <openpgp@ietf.org>, "Neal H. Walfield" <neal@walfield.org>, Daniel Kahn Gillmor <dkg@fifthhorseman.net>
Subject: Re: [openpgp] Revoking Keys: Adding a superceded-by parameter
X-BeenThere: openpgp@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/openpgp>, <mailto:openpgp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/openpgp/>
List-Post: <mailto:openpgp@ietf.org>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/openpgp>, <mailto:openpgp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 26 Jul 2015 10:05:28 -0000

Hi,

the minutes from the Prague meeting have not yet been posted but you can
look at them here:

  http://etherpad.tools.ietf.org:9000/p/notes-ietf-93-openpgp

On Sat, 25 Jul 2015 22:41, look@my.amazin.horse said:

> I think I disagree with this.  It's true that the signature subpacket
> namespace is not very large, but the numbers are that only ~30 subpacket

subpackets denoted data required for proper operation of the protocol or
to implement extra features.  I do not consider information of a
superceeding key important for the protocol; thus a notation would the
right way.

> Are there any other standardized uses for the notation namespace? I am
> only aware of proposed ones, and none which have very widespread use

A small problem with the notations is that you can only use the non-IETF
namespace (e.g. using a domain name based name) which make the notation
data unnecessary long.  At the meeting it was suggested that the process
of allocating a new notation in the IETF namespace will be simplified
for example by allow expert review.  This will make it easier to add new
small notions in the future (and perhaps also key flags).

Adding new subpackets is a more delicate thing and should definitely not
be done "ad-hoc" but using a proper process.


Shalom-Salam,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.