ietf-openpgp
[Top] [All Lists]

Re: Series of minor questions about OpenPGP 6

2009-02-02 10:29:33

On Feb 2, 2009, at 9:54 AM, Christoph Anton Mitterer wrote:

On Sun, 2009-02-01 at 22:23 -0500, David Shaw wrote:
For example you can certainly have multiple keyservers: there are
multiple places to store a key.
I've tried this with gpg, but at least it seems that you can only set one keyserver. Would it parse and query more keyservers if they'd be set in the subpackets?

Nope. There are places where multiple subpackets are reasonable. That doesn't mean that a given implementation will actually act on them.

If you want a better example, look at designated revoker subpackets. GPG will only generate a single designated revoker subpacket per signature. If, however, there are multiple designated revoker subpackets in a given 0x1F, GPG will act on all of them. This implies properly handling the "sensitive" flag in the designated revoker as well, and dealing with the potential conflict when one revoker is sensitive and one is not, but they are located on the same subpacket so they cannot be separated.

David