Problem with faked-system-time option

Jerome Baum jerome at jeromebaum.com
Thu Jun 16 00:08:48 CEST 2011


> You also might consider introducing --timestamp-only (easy to remember) or
> similar as an alias for --sig-notation timestamp-only at gnupg.org=default.

So back to timestamp-only at gnupg.org (vs. 0x40 or 0x50), and blatantly
abusing gnupg.org, is other data of relevance? e.g.:

timestamp-resolution at gnupg.org = <number of seconds error in both directions>

As for critical or not, I would vote for critical. Let's consider the
average OpenPGP user (*any* implementation, not just gnupg). Will they
care to display notations on data signatures, or will they see "good"
and take that key to be the author's?

-- 
Jerome Baum
tel +49-1578-8434336
email jerome at jeromebaum.com
web www.jeromebaum.com
--
PGP: A0E4 B2D4 94E6 20EE 85BA E45B 63E4 2BD8 C58C 753A
PGP: 2C23 EBFF DF1A 840D 2351 F5F5 F25B A03F 2152 36DA



More information about the Gnupg-users mailing list