From 03515927b3945b2ab55b29f4f8ccb33e11f59c7f Mon Sep 17 00:00:00 2001 From: Heiko Schaefer Date: Tue, 5 Dec 2023 13:46:14 +0100 Subject: [PATCH] ch9: edits for clarity --- book/source/09-verification.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/book/source/09-verification.md b/book/source/09-verification.md index 168d4e0..e4b8ddb 100644 --- a/book/source/09-verification.md +++ b/book/source/09-verification.md @@ -189,7 +189,7 @@ Signatures shadow one another, based on reference time. Multiple signatures can be attached to an OpenPGP certificate or component. These signatures can contain conflicting information. When verifying a signature that is not self-qualifying, an implementation needs to consider self-qualifying signatures on the issuer's certificate for qualification. -There might be several signatures per component. +There may be several signatures per component. For example, there could be multiple subkey binding signatures for one subkey. In general, for each category of signatures, only the signature with the latest creation time is considered and takes precedence.