[openpgp] Re: PQC requires urgent semantic cleanup

So - a lot of this discussion hinges on whether it's useful to do a
temporary revocation.

I don't really want to claim that it is useful, but what if someone
_thought_ it's useful: let's say, for example, that someone goes on
vacation for a month, and leaves their YubiKey at home. The neighbors
have a key (of the variety that opens a door), so they revoke the
OpenPGP key for a month. If they come back and see the YubiKey still
in place, they may be confident that the key material is still secure,
but it may theoretically have been used to sign emails on their behalf
in the past month.

Now - we may argue about whether that's a valid use case or not, but
according to the straightforward reading of RFC9580, it's possible
today. So, someone may have done it, so we should be careful about
breaking it.

Combined with the scenario I described before, this would result in
an actual problem if the maliciously created signatures then become
valid.

Best,
Daniel

_______________________________________________
openpgp mailing list -- [email protected]
To unsubscribe send an email to [email protected]