On Mon, 2015-04-27 at 14:10 -0400, Phillip Hallam-Baker wrote:
I would like opinions on whether we should put a running checksum on
the fingerprint encoding or not.
I'm a bit unsure about the use of this,... can you elaborate on the
benefits you think are reached with that?!
Isn't the FP already checksum enough by itself?
Adding another checksum over the fingerprint shouldn't give more
security, or does it (since if it would be so simple to forge similarly
looking FPs that the user may type in by accident we'd have completely
different problems)?
I guess adding a checksum over the fingerprint will just tempt people to
only verify that checksum.
Cheers,
Chris.
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________
openpgp mailing list
openpgp(_at_)ietf(_dot_)org
https://www.ietf.org/mailman/listinfo/openpgp