Return-Path: <dshaw@jabberwocky.com>
X-Original-To: notmuch@notmuchmail.org
Delivered-To: notmuch@notmuchmail.org
Received: from localhost (localhost [127.0.0.1])
	by olra.theworths.org (Postfix) with ESMTP id 7D144431FB6
	for <notmuch@notmuchmail.org>; Mon, 17 Jan 2011 19:54:55 -0800 (PST)
X-Virus-Scanned: Debian amavisd-new at olra.theworths.org
X-Spam-Flag: NO
X-Spam-Score: 0
X-Spam-Level: 
X-Spam-Status: No, score=0 tagged_above=-999 required=5 tests=[none]
	autolearn=disabled
Received: from olra.theworths.org ([127.0.0.1])
	by localhost (olra.theworths.org [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id UsOJPYi6XUUg for <notmuch@notmuchmail.org>;
	Mon, 17 Jan 2011 19:54:55 -0800 (PST)
X-Greylist: delayed 1912 seconds by postgrey-1.32 at olra;
	Mon, 17 Jan 2011 19:54:54 PST
Received: from walrus.jabberwocky.com (walrus.jabberwocky.com [173.9.29.57])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by olra.theworths.org (Postfix) with ESMTPS id E4387431FB5
	for <notmuch@notmuchmail.org>; Mon, 17 Jan 2011 19:54:54 -0800 (PST)
Received: from grover.home.jabberwocky.com (grover.home.jabberwocky.com
	[172.24.84.28]) (authenticated bits=0)
	by walrus.jabberwocky.com (8.14.4/8.14.4) with ESMTP id p0I3MvV1011930
	(version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO);
	Mon, 17 Jan 2011 22:22:58 -0500
Subject: Re: including the entire fingerprint of the issuer in an OpenPGP
	certification
Mime-Version: 1.0 (Apple Message framework v1082)
Content-Type: text/plain; charset=us-ascii
From: David Shaw <dshaw@jabberwocky.com>
In-Reply-To: <4D34F133.3000807@fifthhorseman.net>
Date: Mon, 17 Jan 2011 22:22:57 -0500
Content-Transfer-Encoding: quoted-printable
Message-Id: <2885367E-D215-4BE7-983D-C82C55C64B0F@jabberwocky.com>
References: <4D34F133.3000807@fifthhorseman.net>
To: IETF OpenPGP Working Group <ietf-openpgp@imc.org>
X-Mailer: Apple Mail (2.1082)
X-Mailman-Approved-At: Tue, 18 Jan 2011 12:27:17 -0800
Cc: notmuch <notmuch@notmuchmail.org>
X-BeenThere: notmuch@notmuchmail.org
X-Mailman-Version: 2.1.13
Precedence: list
List-Id: "Use and development of the notmuch mail system."
	<notmuch.notmuchmail.org>
List-Unsubscribe: <http://notmuchmail.org/mailman/options/notmuch>,
	<mailto:notmuch-request@notmuchmail.org?subject=unsubscribe>
List-Archive: <http://notmuchmail.org/pipermail/notmuch>
List-Post: <mailto:notmuch@notmuchmail.org>
List-Help: <mailto:notmuch-request@notmuchmail.org?subject=help>
List-Subscribe: <http://notmuchmail.org/mailman/listinfo/notmuch>,
	<mailto:notmuch-request@notmuchmail.org?subject=subscribe>
X-List-Received-Date: Tue, 18 Jan 2011 03:54:55 -0000

On Jan 17, 2011, at 8:47 PM, Daniel Kahn Gillmor wrote:

> Would there be any objection to a new subpacket type for OpenPGPv4 =
that
> would include the remaining 96 bits of the issuer's fingerprint?  (the
> "high 96" proposal)
>=20
> Alternately, what about a new subpacket type that simply includes the
> entire 160 bits of the issuer's fingerprint?   (the "full fingerprint"
> proposal)

I like this idea.  I would do it as "full fingerprint" myself.  The =
difference in storage between 160 bits and 96 bits is all of 8 bytes.  I =
think the simplicity of being able to say the whole fingerprint is in =
there is worth a measly 8 bytes.

Do we necessarily need a new subpacket type for this?  It could pretty =
easily be a notation.

David