On 31 Jul 2015, Phillip Hallam-Baker wrote:
I think a 25 character / 125 bit fingerprint is going to be
fine. BUT there are two issues I don't want to come up. One is
someone builds something that depends on the fingerprints being
collision resistant and blames it on the spec. The second is that
some yahoo works this out again in five years time and writes a
paper claiming to have 'broken' the spec.
We can just mention that fingerprints are not (meant to be) collision
resistant in the spec, that should take care of that.
- V
_______________________________________________
openpgp mailing list
openpgp(_at_)ietf(_dot_)org
https://www.ietf.org/mailman/listinfo/openpgp