Post #1834728
2026-04-27 17:54 UTC
@GnuPG @bwh that statement is of course wrong, speaking as co-author of RFC 9580 and as former Security Area Director I am well aware of the actual history.
The problem now with the Individual (non-consensus) draft of gnupg/Werner is that it pretends to be a draft that will register IANA OpenPGP values, while it doesn’t, and conflicts with the real RFC 9580 that already allocated values. So anything different from RFC 9589 will just cause confusions for real OpenPGP implementations. If it wants to register its own values, it should do so as “reserved” values for IANA OpenPGP so there are no conflicting values. And it should stay away from already allocated values to introduce incompatible behaviour.
Replies (1)
-
@GnuPG@mstdn.social 2026-04-28 06:53
@letoams @bwh Obviously there is a difference of opinion and a difference of how carrying some arguments are. To communicate the difference we need some terminology. `OpenPGPv4`, ` LibrePGP` and `OpenPGPv6` are short names of the respective implemented, partly implemented and proposed standards. They shall be neutral towards which one will be considered the better one in the end so the discussion can turn towards the technical merits and advantages and drawbacks for users.