[openpgp] Re: I-D Action: draft-ietf-openpgp-pqc-14.txt

Daniel Kahn Gillmor <[email protected]> Thu, 04 Dec 2025 13:39:08 -0500

Newsgroups	gmane.ietf.openpgp
Message-ID	<[email protected]>

On Tue 2025-11-18 11:29:35 -0500, Simo Sorce wrote:
> I do not see any rational motivation to include signature generation in
> reproducible build tooling.
>
> Signatures only attest the authenticity of a package producer, and have
> no influence on the contents.

With no hats on, i agree with Simo here about the utility of
deterministic signatures for reproducible builds.

With my chair hat on, even if we were to consider trying to emphasize
reproducible builds, contextually, i think this work would belong in its
own discussion, as it is not specific to draft-ietf-openpgp-pqc.

Regards,

        --dkg

_______________________________________________
openpgp mailing list -- [email protected]
To unsubscribe send an email to [email protected]

signature.asc (application/pgp-signature, 324 B)