making it easy to find keys

Ingo Klöcker ingo.kloecker at epost.de
Sat Dec 6 20:01:17 CET 2003


On Friday 05 December 2003 11:37, Stewart V. Wright wrote:
> G'day Anthony,
>
> * Anthony E. Greene <agreene at pobox.com> [031205 02:01]:
> > I use the following email headers:
> >
> >   X-OpenPGP-KeyID:
> >   X-OpenPGP-Fingerprint:
> >   X-OpenPGP-URL:
> >
> > I think that's more informative and consistent that just using
> > X-Request-PGP.
>
> Why?  If you sign a message the recipient already gets the
> KeyID/Fingerprint information.

If a subkey was used to sign a message then there's no way to determine 
the primary key id. Not all keyservers support looking for keys by the 
key id of a subkey.

> What do the two extra headers gain 
> you?  Or at the very least why both KeyID and Fingerprint?

Note: For RSA v3 keys KeyID and Fingerprint are not related.

Regards,
Ingo
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: signature
Url : /pipermail/attachments/20031206/b1b5a07b/attachment.bin


More information about the Gnupg-users mailing list