GPG on Windows 7?

J. Ottosson j-001 at
Wed Nov 17 19:27:38 CET 2010

On 17 Nov 2010 at 11:46, Robert J. Hansen wrote:

> It is deprecated in the minds of some people, but that's not the same as
> it being deprecated.  RFC3156 (which most people cite when talking about
> inline PGP being deprecated) has been out of date for quite some time and
> is not all that compatible with RFC4880.
> For instance, from RFC3156, "OpenPGP signed data":
>     "Currently defined values are 'pgp-md5', 'pgp-sha1',
>      'pgp-ripemd160', 'pgp-md2', 'pgp-tiger192', and
>      'pgp-haval-5-160'."
> Strict RFC3156 conformance means the only two GnuPG hashes you can use are
> SHA-1 and RIPEMD-160, neither of which has strong long-term prospects. 
> This, alone, should be enough for us to say RFC3156 should not be
> considered normative of PGP usage.
> Speaking only for myself, I consider RFC4880 normative, and RFC3156
> obsolescent.

You are indeed not only speaking for yourself on this matter.


More information about the Gnupg-users mailing list