On Mon, Jul 01, 2002 at 03:49:24PM -0400, vedaal wrote:
Is there a standardized way to embed photos in OpenPGP keys? Anyone
interested in writing such a standard?
as it is now, it is definitely 'different' for PGP and GnuPG.
PGP compresses the .jpg into the photo id, and does not export it when
exporting the key.
GnuPG leaves the .jpg intact as added by the user, and exports it intact as
part of the .asc
if PGP downloads a public key with a photo id, that was generated by GnuPG,
it will export a photo as part of the .asc, but 'altered/compressed'.
the exported .asc of the public key will be different than the exported .asc
of the GnuPG key.
Altered or compressed in what way? If PGP changes the photo, then it
would break all signatures on the photo ID.
PGP does alter the photo when you paste it in (converts it to jpeg and
shrinks it), but once it's in the key, it does not change it. GnuPG
requires a jpeg from the user and does not change it. Either of these
is fine, since the spec says nothing about what happens to the photo
before it is placed into the key.
It does not matter if the ascii-armored representation of the key is
different between GnuPG and PGP. This does not necessarily mean that
the photo has been changed.
David
--
David Shaw | dshaw(_at_)jabberwocky(_dot_)com | WWW
http://www.jabberwocky.com/
+---------------------------------------------------------------------------+
"There are two major products that come out of Berkeley: LSD and UNIX.
We don't believe this to be a coincidence." - Jeremy S. Anderson