Problem with faked-system-time option
Jerome Baum
jerome at jeromebaum.com
Thu Jun 16 00:08:48 CEST 2011
> You also might consider introducing --timestamp-only (easy to remember) or
> similar as an alias for --sig-notation timestamp-only at gnupg.org=default.
So back to timestamp-only at gnupg.org (vs. 0x40 or 0x50), and blatantly
abusing gnupg.org, is other data of relevance? e.g.:
timestamp-resolution at gnupg.org = <number of seconds error in both directions>
As for critical or not, I would vote for critical. Let's consider the
average OpenPGP user (*any* implementation, not just gnupg). Will they
care to display notations on data signatures, or will they see "good"
and take that key to be the author's?
--
Jerome Baum
tel +49-1578-8434336
email jerome at jeromebaum.com
web www.jeromebaum.com
--
PGP: A0E4 B2D4 94E6 20EE 85BA E45B 63E4 2BD8 C58C 753A
PGP: 2C23 EBFF DF1A 840D 2351 F5F5 F25B A03F 2152 36DA
More information about the Gnupg-users
mailing list