On Wed, 31 Jul 2019 16:34, dkg(_at_)fifthhorseman(_dot_)net said:
The "revocation key" subpacket is problematic. It is the the most
fragile piece of the specification wrt the fingerprint (collisions
against a fingerprint can create surprising revocation effects). And
With the move to v5 keys this will be solved en-passant.
replaces it with a "designated revoker" subpacket that includes the
full key, rather than the fingerprint.
I view this as problematic in the light of our preparations to allow for
larger key material. With PQC we may need megabyte large keys and then
including an entire key would double the size of a keyblock.
Shalom-Salam,
Werner
--
Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz.
signature.asc
Description: PGP signature
_______________________________________________
openpgp mailing list
openpgp(_at_)ietf(_dot_)org
https://www.ietf.org/mailman/listinfo/openpgp