On Wed, 05 Mar 2003 16:29:28 -0800, Rodney Thayer said:
- deprecating pgp 2 keys. I don't happen to like the idea myself, but lots of
people (Len?) have strong opinions about this and therefore I think
the WG should
discuss it, at least a little bit, at least to form a "wg opinion".
I don't think that it is really required to deprecate v3 keys. Almost
all applications do create v4 keys and it should be up to the
implementor to support them or not. There are still enough v3 keys
alive so that implementors must still handle keyIDs and fingerprints
separately.
The real problem is the continued use of IDEA, especially to protect
secret keys. A strong word that the use of IDEA is deprecated would
be helpful.
Shalom-Salam,
Werner