[openpgp] Re: Certificate discovery over HKP
Andrew Gallagher <[email protected]>
| Newsgroups | gmane.ietf.openpgp |
|---|---|
| Message-ID | <[email protected]> |
On 9 Apr 2025, at 01:20, Vincent Breitmoser <[email protected]> wrote: > > I don't want to be too dismissive of these efforts, but personally I'm not convinced of the value proposition. WKD took us a decade to get to a relatively stable state, and there are now finally some tens of thousands of domains that use it. The features listed here do not warrant a competing standard imo, unless WKD is completely stuck as a spec - which I don't think (hope) it is. If I had to pick the most pressing issue, it’s that we want to be able to serve both a v4 and a v6 certificate in one lookup, and many clients will choke on the whole thing rather than gracefully ignore v6 - so we need some way to upgrade to v6 safely. Nobody was sure how to do that without defining a parallel discovery method, at which point unifying v6 search and v6 discovery under a single API minimises the number of competing standards. A _______________________________________________ openpgp mailing list -- [email protected] To unsubscribe send an email to [email protected]
signature.asc
(application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEKR55odxVrielLu+DXB7EBNWQZikFAmf2PUEACgkQXB7EBNWQ Zim7kw/9GY4JzEAzzHG0lsdhWEKRfU6fZtawwxvnFGI3eQi/G0+UdjaqYApF62B/ tzhSym634rWaTeWrCVoEbTSFYmzHqkG0P5IrRapFEnpJOfmtC02kW1FA2Dpw+Bm3 T1VDJsIxuSas2V9+xjFzccK2oI0/exIxdU69uNN18HjUHSeMfXjKQqb7F+381x9A mFuXczioNKb0LsmwlmS/ZC+A7oDSB7LiTzZqvq2cIXqKIcsTZSXPGgdKBH5AgdGM uWlEx2MEoPWhDW21Yoy7X4hWQ5ghCZXVEGFRwaw+fbtkuR8KQQOceCwI6RNUajib XgAYXFvPwoShdrpXasW2e0lckCSDwtctPTxHtvSz5fu9QlBD4JkE93iFpki7hcxw 7aPoSwBotQkueHpMoYUYBAxQkBCZ1tptxuegFyPlDwMYCVOQj+j+TulrLtIXqRjz JrpUTa0JLLjhEiPowexZNBAcv4cEwhzcHFUbAGJfkW8yz4E7Y2J4Zu8LtbeNS8v2 x8KIi+CRnugC0hcm9/Hj8yO+Rp8Ex10k8wNo2upDigdnWE4/1rIPjZWnYYay+/1B Hskzm0h/Mul5xwWWNVj/qccVv0mIhcPqNMtFDUeFhy3Any9U65dT/NFu6mgtg7Gj srQHvrMly6Rnbaby+tioZtKUA43MFkA+eAsxwqKP6fTmCi76k9M= =NCZO -----END PGP SIGNATURE-----