More wording

This commit is contained in:
Paul Schaub 2023-12-08 16:43:38 +01:00 committed by Heiko Schaefer
parent d8b4eb16a1
commit e35c334d48
No known key found for this signature in database
GPG key ID: DAE9A9050FCCF1EB

View file

@ -162,8 +162,8 @@ In this scenario, it is important that the sender encrypts the message to all av
#### Prevent "downgrade" -> Policy
Each implementation should define a "minimum" level of security when it comes to algorithms.
If the lowest common denominator of symmetric encryption algorithms preferred by a set of recipients provides too little security, the implementation should either use a fallback algorithm instead, or fail to produce a message at all.
Each implementation should define a "minimum" level of security when it comes to algorithms and key lengths.
If the lowest common denominator of symmetric encryption algorithms preferred by a set of recipients provides too little security, the implementation should either use a configured fallback algorithm instead, or fail to produce a message at all.
### Implications of how a recipient cert is "addressed" (fingerprint/key-ID vs. user-ID) (preferences, expiration, revocation)