Re: [openpgp] Should signatures be rejected if the embedded hash prefix does not match?

[Andrew Gallagher <[e-mail]>]

On 02/03/2023 09:44, Justus Winter wrote:
> I don't think either warrants a clarification for v4 (let alone v3)
> signatures.

I was erring on the side of caution. However, in the interests of moving 
this along, I withdraw the last sentence of my proposed text.

It now reads:

```
RFC4880 did not specify that implementations must reject v3 or v4 
signatures with incorrect prefix octets, and this allowed a significant 
number of apparently valid but malformed signatures to accumulate in the 
wild.
An implementation MAY accept v3 or v4 signatures where these octets 
don't match the computed hash but the signature is otherwise valid.
```

A