Werner Koch <wk(_at_)gnupg(_dot_)org> writes:
I strongly disagree for OpenPGP. The MUSTs, SHOULDs, and MAYs have been
carefully designed and implemented in a sensible way. Thus there are no real
world interoperability problems between OpenPGP implementations.
Uhh, I'll have to disagree (strongly) with that, perhaps from the point of GPG
this is true since it's the de facto reference implementation that everyone
makes their code compatible with, but when you need to interop across non-GPG
implementations it can get pretty hairy, I've had to reverse-engineer source
code and create instrumented versions of other apps that hex-dump data so I
can see what they're doing. I've also had to do that with GPG on a couple of
occasions where the spec was unclear on which data needed to be processed in
which way. I assume that a lot, if not all, the code out there is written to
be compatible with the GPG de facto profile, in the same way that SSH code is
written to be compatible with the OpenSSH (server) and Putty (client) de facto
profiles.
Peter.
_______________________________________________
openpgp mailing list
openpgp(_at_)ietf(_dot_)org
https://www.ietf.org/mailman/listinfo/openpgp