[openpgp] Re: I-D Action: draft-ietf-openpgp-replacementke y-05.txt
Daniel Kahn Gillmor <[email protected]>
| Newsgroups | gmane.ietf.openpgp |
|---|---|
| Message-ID | <[email protected]> |
On Mon 2025-08-18 12:14:50 +0100, Andrew Gallagher wrote:
> * if a Replacement Key subpacket is included in a revocation signature, then the Reason For Revocation subpacket SHOULD indicate "Key is superseded”.
>
> This already implies that “Key is retired and no longer used” SHOULD NOT be used with a Replacement Key subpacket. If we make this explicit, then we should be able to sidestep the question of “what is a hard revocation".
I like this. Looking in git, i think you've made reasonable changes, in
particular changing that SHOULD to a MUST, and having the RKSP only be
meaningful in a "key is superseded" revocation signature.
I think this is a simple and clean path forward.
--dkg
_______________________________________________
openpgp mailing list -- [email protected]
To unsubscribe send an email to [email protected]
signature.asc
(application/pgp-signature, 227 B)
-----BEGIN PGP SIGNATURE----- iHUEARYKAB0WIQRjrBGOWy5dZsiKhad4C4VO2cK0lgUCaLdtIwAKCRB4C4VO2cK0 lvjaAP934geMCzWGrjlISQLTS6ajjqBNScs9osSvtY4hYQbeAQEAnEukpnsLzgT+ rePT3zvNyYv6849DL4xdwmCGxKvAfwQ= =c/ka -----END PGP SIGNATURE-----