diff --git a/book/source/17a-adv-certificates.md b/book/source/17a-adv-certificates.md index a49ba9d..5b96291 100644 --- a/book/source/17a-adv-certificates.md +++ b/book/source/17a-adv-certificates.md @@ -315,7 +315,7 @@ Some OpenPGP software may add User IDs to a certificate, which are not bound to [PET]: https://sequoia-pgp.org/blog/2023/04/08/sequoia-sq/#an-address-book-style-trust-model -Sequoia additionally certifies these "local, third party, User IDs" with a local trust root to facilitate local authentication decisions. +Sequoia additionally certifies these "local, third party, User IDs" with a local trust anchor to facilitate local authentication decisions. To prevent accidental publication of these local User IDs (e.g. to public keyservers), Sequoia marks these binding signatures as "local" artifacts using [Exportable Certification](https://www.ietf.org/archive/id/draft-ietf-openpgp-crypto-refresh-12.html#name-exportable-certification) subpackets to mark them as non-exportable. (distribution)=