Fingerprint addition
    David Shaw 
    dshaw at jabberwocky.com
       
    Mon Feb 10 03:01:03 CET 2003
    
    
  
On Sun, Feb 09, 2003 at 12:51:37AM +0000, Stefan Sels wrote:
> Hi,
> 
> I was just thinking about GnuPG/PGP fingerprints and thought if it
> wouldn?t be usefull to add a new part to the fingerprint :
> 
> A78B 16A7 E6AE 8930 1F69  6D96 46B9 E688 42CE 3635 / 9AA9 D811
> 
> The new part behind / is the md5sum of the public key including
> signatures so you could track if the "current" public key is
> valid. I know it would be better to put an expiry on a key but it
> would be an good adition to an complete static fingerprint.
The problem with this is that given two fingerprints, you have no way
to tell them apart.
For example, given:
> A78B 16A7 E6AE 8930 1F69  6D96 46B9 E688 42CE 3635 / 9AA9 D811
and:
> A78B 16A7 E6AE 8930 1F69  6D96 46B9 E688 42CE 3635 / A789 542F
Which is the "current" one?
David
-- 
   David Shaw  |  dshaw at jabberwocky.com  |  WWW http://www.jabberwocky.com/
+---------------------------------------------------------------------------+
   "There are two major products that come out of Berkeley: LSD and UNIX.
      We don't believe this to be a coincidence." - Jeremy S. Anderson
    
    
More information about the Gnupg-devel
mailing list