[openpgp] Re: Certificate discovery over HKP

Andrew Gallagher <[email protected]>
Newsgroups gmane.ietf.openpgp
Message-ID <[email protected]>
On 9 Apr 2025, at 01:20, Vincent Breitmoser <[email protected]> wrote:
> 
> I don't want to be too dismissive of these efforts, but personally I'm not convinced of the value proposition. WKD took us a decade to get to a relatively stable state, and there are now finally some tens of thousands of domains that use it. The features listed here do not warrant a competing standard imo, unless WKD is completely stuck as a spec - which I don't think (hope) it is.

If I had to pick the most pressing issue, it’s that we want to be able to serve both a v4 and a v6 certificate in one lookup, and many clients will choke on the whole thing rather than gracefully ignore v6 - so we need some way to upgrade to v6 safely. Nobody was sure how to do that without defining a parallel discovery method, at which point unifying v6 search and v6 discovery under a single API minimises the number of competing standards.

A

_______________________________________________
openpgp mailing list -- [email protected]
To unsubscribe send an email to [email protected]
signature.asc (application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE-----
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=NCZO
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.