setting expiration date changes primary UID (was: Re: GnuPG race causes misordered uids?

David Shaw dshaw at jabberwocky.com
Wed May 28 15:36:02 CEST 2003


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wed, May 28, 2003 at 08:59:25AM +0200, Werner Koch wrote:

> Better make sure the primary flag has been set.  A warning should be
> sufficient.

You're right.  I was thinking about the case where all the self-sigs
get updated at once (e.g. "expire").  It would be possible to cheat a
bit there and just timestamp the primary one second earlier.  However,
this problem exists with "setpref" as well, and that may only apply to
one uid.  A mess.

I'll add a warning.

David
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3-cvs (GNU/Linux)
Comment: http://www.jabberwocky.com/david/keys.asc

iD8DBQE+1K1W4mZch0nhy8kRAn/OAJ9LmnyK/ONkkxL458jvD6pNEpXmeQCgxu7R
MXirm9FOdrp4FIM3fpTFxpk=
=Xw1x
-----END PGP SIGNATURE-----




More information about the Gnupg-devel mailing list