DSA2 and recipient preferences

Bernd Eckenfels lists at lina.inka.de
Tue Jun 6 02:20:30 CEST 2006


On Sat, Jun 03, 2006 at 06:00:23PM -0400, David Shaw wrote:
> With DSA2, the recipient may not have *any* of the digests needed by
> the sender.  The choice then becomes to let the sender pick a digest
> the recipient can't handle, or... don't sign at all.

Maybe a "bahaviour_on_digestdowngrade = _accept_ | warn | abort" option? Or
make people add the sha1 fallback to the allowed algos if they dont want the
warning...

Gruss
Bernd



More information about the Gnupg-devel mailing list