Which Digest Algorithm to use?

David Shaw dshaw at jabberwocky.com
Sat Mar 4 17:36:23 CET 2006


On Sat, Mar 04, 2006 at 03:27:54PM +0100, Christoph Anton Mitterer wrote:
> David Shaw wrote:
> 
> >He can if he wants to.  It doesn't actually make a difference either
> >way since the new signature overrides the older one.
> >  
> >
> Is this only gpg behaviour or does the standard specify to only consider
> the most recent sig?

    An implementation that encounters multiple self-signatures on the
    same object may resolve the ambiguity in any way it sees fit, but
    it is RECOMMENDED that priority be given to the most recent
    self-signature.

There is no implementation that behaves otherwise.

David



More information about the Gnupg-users mailing list