IETF Logo Mail Archive

[openpgp] Re: I-D Action: draft-ietf-openpgp-replacementkey-01.txt

Heiko Schäfer <heiko.schaefer@posteo.de> Fri, 01 November 2024 19:21 UTC

Return-Path: <heiko.schaefer@posteo.de>
X-Original-To: openpgp@ietfa.amsl.com
Delivered-To: openpgp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EED5DC14F6AD for <openpgp@ietfa.amsl.com>; Fri, 1 Nov 2024 12:21:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.102
X-Spam-Level:
X-Spam-Status: No, score=-2.102 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=posteo.de
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id i-KXWFnY2Sef for <openpgp@ietfa.amsl.com>; Fri, 1 Nov 2024 12:21:46 -0700 (PDT)
Received: from mout02.posteo.de (mout02.posteo.de [185.67.36.66]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D04B2C151076 for <openpgp@ietf.org>; Fri, 1 Nov 2024 12:21:45 -0700 (PDT)
Received: from submission (posteo.de [185.67.36.169]) by mout02.posteo.de (Postfix) with ESMTPS id 28828240101 for <openpgp@ietf.org>; Fri, 1 Nov 2024 20:21:43 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=posteo.de; s=2017; t=1730488903; bh=oue6w9HS8p7lg9fLuxI55AR2ORA/iPkf7aVaaEeHow0=; h=Content-Type:Message-ID:Date:MIME-Version:Subject:To:From:From; b=I12Q+zdml8sz3R+fyIjVJ4mPPK1x3ORQiM/UDQiIusIPgAaFn1MGC5pMT4oVnnEhx pWCSYYrI6+z3ea8Tk3rfnhvB6DRQi5vf+XG3VlWacK9ipllhPnPMZ2gHOWEyDM4mdk gIoa7Jnb4FShrWpeOcHR/3U7u9YowPKFA937O+wWJomjleXUEj40j4zg69L3pgEZ+8 cAbpm+tSHqL5vl76FbdrnYjy5+8jGe7CbfDp/cM8/Z1NaSY/o0ODL1EgSEdohIYoKu fGGtXEDku42muwf0wZlrJkMnNP6nvl0K+Q4pBRGTb+oLvTLiyx6WJYdv34ncH9l0wQ i9ffx8iLdfAvg==
Received: from customer (localhost [127.0.0.1]) by submission (posteo.de) with ESMTPSA id 4Xg9hk5Gjxz6tyk for <openpgp@ietf.org>; Fri, 1 Nov 2024 20:21:42 +0100 (CET)
Received: from services.foundation.hs (services.foundation.hs [192.168.21.4]) by mail.foundation.hs (Postfix) with ESMTP id 5198F705C5 for <openpgp@ietf.org>; Fri, 1 Nov 2024 20:21:42 +0100 (CET)
Content-Type: multipart/alternative; boundary="------------uaSw1A5byiCmSxYBdFdBfI35"
Message-ID: <d3d5e59e-2ddb-4b4d-867e-b8a7f1df203c@posteo.de>
Date: Fri, 01 Nov 2024 19:21:41 +0000
MIME-Version: 1.0
To: openpgp@ietf.org
References: <172954607466.2080527.11129941200377024335@dt-datatracker-78dc5ccf94-w8wgc> <B498EDD0-1FE4-405B-81AD-8E4854720B6F@andrewg.com>
Content-Language: en-US
From: Heiko Schäfer <heiko.schaefer@posteo.de>
In-Reply-To: <B498EDD0-1FE4-405B-81AD-8E4854720B6F@andrewg.com>
Message-ID-Hash: TOGBO2SDOTREIL4K5WBLOUVRBGOP4YPJ
X-Message-ID-Hash: TOGBO2SDOTREIL4K5WBLOUVRBGOP4YPJ
X-MailFrom: heiko.schaefer@posteo.de
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-openpgp.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [openpgp] Re: I-D Action: draft-ietf-openpgp-replacementkey-01.txt
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/openpgp/qrTt8JnPF0IwmXpeJ-z73Mad8DQ>
List-Archive: <https://mailarchive.ietf.org/arch/browse/openpgp>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Owner: <mailto:openpgp-owner@ietf.org>
List-Post: <mailto:openpgp@ietf.org>
List-Subscribe: <mailto:openpgp-join@ietf.org>
List-Unsubscribe: <mailto:openpgp-leave@ietf.org>

Hey Andrew, list,

thanks for working on moving this draft forward!
I think it's very useful to specify a format for replacement, and to 
finalize it sooner rather than later.

Regarding the target record format:

I'd want to always see the Fingerprint included. Fingerprints are, after 
all, currently commonly used for keyserver lookup.
A replacement key format that requires reworking keyserver APIs before 
it can be used to obtain certificates over the network seems 
unreasonably aspirational to me.

FWIW, I'm not convinced that including the imprint adds value that 
justifies the complexity it brings.
But I'm abstaining from voting for any particular approach to that field.

Thanks,
Heiko

v2.28.0 | Report a Bug | By Email | System Status