[openpgp] Re: I-D Action: draft-ietf-openpgp-replacementke y-07.txt

Andrew Gallagher <[email protected]> Tue, 21 Apr 2026 20:07:01 +0100
Newsgroups gmane.ietf.openpgp
Message-ID <[email protected]>
Hi, all.

I have refreshed the key replacement draft by merging the open changes 
previously discussed on-list and publishing a new draft -07.

The only significant difference between -07 and -06 is that the imprint 
digest algorithm is now specified as SHA3-256 for all currently-known 
target key versions (i.e. <=6). This simplifies the process of 
generating new self-signatures, as the replacement key subpacket can now 
always be cloned directly from an existing self-signature, even if the 
signatures use different digest algorithms.

There are also some minor nits and clarifications, and the example 
certificates have been altered slightly to be more realistic.

Thanks,
A

On 21/04/2026 19:58, [email protected] wrote:
> Internet-Draft draft-ietf-openpgp-replacementkey-07.txt is now available. It
> is a work item of the Open Specification for Pretty Good Privacy (OPENPGP) WG
> of the IETF.
> 
>     Title:   OpenPGP Key Replacement
>     Authors: Daphne Shaw
>              Andrew Gallagher
>     Name:    draft-ietf-openpgp-replacementkey-07.txt
>     Pages:   26
>     Dates:   2026-04-21
> 
> Abstract:
> 
>     This document specifies a method in OpenPGP to suggest a replacement
>     for an expired, revoked, or deprecated primary key.
> 
> The IETF datatracker status page for this Internet-Draft is:
> https://datatracker.ietf.org/doc/draft-ietf-openpgp-replacementkey/
> 
> There is also an HTMLized version available at:
> https://datatracker.ietf.org/doc/html/draft-ietf-openpgp-replacementkey-07
> 
> A diff from the previous version is available at:
> https://author-tools.ietf.org/iddiff?url2=draft-ietf-openpgp-replacementkey-07
> 
> Internet-Drafts are also available by rsync at:
> rsync.ietf.org::internet-drafts
> 
> 
> _______________________________________________
> openpgp mailing list -- [email protected]
> To unsubscribe send an email to [email protected]

_______________________________________________
openpgp mailing list -- [email protected]
To unsubscribe send an email to [email protected]