1) Should we deprecate SHA1 in signatures? (Or did we already?)
This would break all existing signatures for no good reason. Instead a
new v5
key format MUST NOT be used with signatures "weaker" than SHA-256.
Deprecation is not the same as obsoleting. Deprecation doesn't break
existing signatures; it just says new signatures MUST NOT use SHA-1.
It sounds as if you're agreeing with the deprecation suggestion. Or am I
badly misunderstanding something?
_______________________________________________
openpgp mailing list
openpgp(_at_)ietf(_dot_)org
https://www.ietf.org/mailman/listinfo/openpgp