IETF Logo Mail Archive

Re: [openpgp] Version 1 image header bits that MUST be 0

Paul Wouters <paul@nohats.ca> Mon, 29 May 2023 13:11 UTC

Return-Path: <paul@nohats.ca>
X-Original-To: openpgp@ietfa.amsl.com
Delivered-To: openpgp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BEAF0C1516E3 for <openpgp@ietfa.amsl.com>; Mon, 29 May 2023 06:11:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.094
X-Spam-Level:
X-Spam-Status: No, score=-7.094 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nohats.ca
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wNPCJyco8dR8 for <openpgp@ietfa.amsl.com>; Mon, 29 May 2023 06:11:47 -0700 (PDT)
Received: from mx.nohats.ca (mx.nohats.ca [193.110.157.85]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3E05CC151538 for <openpgp@ietf.org>; Mon, 29 May 2023 06:11:46 -0700 (PDT)
Received: from localhost (localhost [IPv6:::1]) by mx.nohats.ca (Postfix) with ESMTP id 4QVGBm4dHfz3BP; Mon, 29 May 2023 15:11:44 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nohats.ca; s=default; t=1685365904; bh=oeETo8a1So0+C90KFFkk6ZZuucqzQuj1IQuPmTt9MYg=; h=Date:From:To:cc:Subject:In-Reply-To:References; b=mL+A5ES4BrRc5SKQcaZv5EXKyVJ9/tM68tjhtfOUhG9d6xCsGzwlTpb2Gc9hKLwd5 3iOSyRUO3Puw/bq7AABMpABqjP86VmES++tHJqEqHUNZeAxSgkFeuZZgnjRCBFZqb+ lNolUanC39Y9mvbFmJ5cYP5L3MMUhfLKfCMr1t4s=
X-Virus-Scanned: amavisd-new at mx.nohats.ca
Received: from mx.nohats.ca ([IPv6:::1]) by localhost (mx.nohats.ca [IPv6:::1]) (amavisd-new, port 10024) with ESMTP id M3G1ECWOKrLT; Mon, 29 May 2023 15:11:43 +0200 (CEST)
Received: from bofh.nohats.ca (bofh.nohats.ca [193.110.157.194]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx.nohats.ca (Postfix) with ESMTPS; Mon, 29 May 2023 15:11:43 +0200 (CEST)
Received: by bofh.nohats.ca (Postfix, from userid 1000) id 7C8BFFF620C; Mon, 29 May 2023 09:11:42 -0400 (EDT)
Received: from localhost (localhost [127.0.0.1]) by bofh.nohats.ca (Postfix) with ESMTP id 790C0FF620A; Mon, 29 May 2023 09:11:42 -0400 (EDT)
Date: Mon, 29 May 2023 09:11:42 -0400
From: Paul Wouters <paul@nohats.ca>
To: Andrew Gallagher <andrewg=40andrewg.com@dmarc.ietf.org>
cc: Daniel Kahn Gillmor <dkg@fifthhorseman.net>, "openpgp@ietf.org" <openpgp@ietf.org>
In-Reply-To: <6D291C82-0F6F-4905-88DF-60A49674C76B@andrewg.com>
Message-ID: <85dbb8e2-3bda-1ff4-e721-ea87d1f4d07b@nohats.ca>
References: <8211a864-3ce5-bb60-2aa8-6e73e82213ef@nohats.ca> <87lehy95ba.fsf@fifthhorseman.net> <6D291C82-0F6F-4905-88DF-60A49674C76B@andrewg.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"; format="flowed"
Archived-At: <https://mailarchive.ietf.org/arch/msg/openpgp/r61JglZoe4d71_Oj4z-XLbnAEiw>
Subject: Re: [openpgp] Version 1 image header bits that MUST be 0
X-BeenThere: openpgp@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/openpgp>, <mailto:openpgp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/openpgp/>
List-Post: <mailto:openpgp@ietf.org>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/openpgp>, <mailto:openpgp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 29 May 2023 13:11:51 -0000

On Mon, 29 May 2023, Andrew Gallagher wrote:

> On 8 May 2023, at 17:05, Daniel Kahn Gillmor <dkg@fifthhorseman.net> wrote:
>>
>> As an alternate approach, i expect it would be more straightforward to
>> deprecate these bits (and much of this flexibility) entirely.  The root
>> of the issue is that there is too much unused extensibility here.  A
>> simplifying approach might be:
>>
>> - drop the Image Attribute Version registry
>>
>> - drop the Image Attribute Encoding Format registry
>
> - drop Image Attribute types
>
> - deprecate User Attribute packets
>
> I see no concrete use for them other than to bloat keys, frustrate distribution, and abuse keyservers for anonymous file sharing. Anything else can be achieved in a more straightforward manner by signing a document.

This got logged as an unchartered issue at https://gitlab.com/openpgp-wg/rfc4880bis/-/issues/167
so it can be picked up for discussion after the crypto refresh and
rechartering is done.

Thanks!

Paul

v2.23.0 | Report a Bug | By Email