HI,
On Tue, February 23, 2021 12:16 pm, Werner Koch wrote:
On Tue, 23 Feb 2021 08:15, Derek Atkins said:
Implementations SHOULD generate V4 signatures. Implementations MUST
NOT create version 3 signatures; they MAY accept version 3
signatures.
There is no MUST create version. Is this intended to change?
This is is an editorial problem due to our step by step re-iteration
process. The dropped draft-ietf-openpgp-rfc4880bis-10.txt had this text:
Implementations MUST generate version 5 signatures when using a
version 5 key. Implementations SHOULD generate V4 signatures with
version 4 keys. Implementations MUST NOT create version 3
signatures; they MAY accept version 3 signatures.
which should explain above. But right in the course of re-iteration
Paul and me should have noticed that and adjusted it accordingly.
Okay, so this is "intended to change" are more edits are done.
Gotcha.
-derek
--
Derek Atkins 617-623-3745
derek(_at_)ihtfp(_dot_)com www.ihtfp.com
Computer and Internet Security Consultant
_______________________________________________
openpgp mailing list
openpgp(_at_)ietf(_dot_)org
https://www.ietf.org/mailman/listinfo/openpgp