Commit graph

86 commits

Author SHA1 Message Date
Tammi L. Coles
f41cd95139 move globally 2023-12-04 13:07:44 +00:00
Tammi L. Coles
34954ef996 edit to commit e496ee28e7 2023-12-04 12:57:44 +00:00
Tammi L. Coles
a20aaba4d3 edits to commit 7e339903fc 2023-12-04 11:49:19 +00:00
Tammi L. Coles
6bc0ddddd9 remove s to clarify the or choice 2023-12-04 11:31:35 +00:00
Tammi L. Coles
16d4442073 ed ch8 feedback commit e59e70939c 2023-12-04 11:19:41 +00:00
Heiko Schaefer
e496ee28e7
Attempt to solve https://codeberg.org/openpgp/notes/pulls/152/files#issuecomment-1357978 2023-11-30 18:25:50 +01:00
Heiko Schaefer
7e339903fc
Attempt to address
https://codeberg.org/openpgp/notes/pulls/152/files#issuecomment-1357973
2023-11-30 16:54:25 +01:00
d0b4502a4b
MOST implementations assume only primary-key Certification capable 2023-11-28 22:13:20 +01:00
326f1541cb
missing 'key' 2023-11-28 22:11:30 +01:00
Heiko Schaefer
e3c76587e3
revert to the original plural 2023-11-28 20:59:52 +01:00
Heiko Schaefer
dda95bdc15
minor edit 2023-11-28 20:59:51 +01:00
Heiko Schaefer
3d82292858
this seems helpful and non-obvious to me? 2023-11-28 20:19:34 +01:00
Heiko Schaefer
ac61a0ca55
generalize to include user attributes 2023-11-28 20:16:09 +01:00
Heiko Schaefer
71df26b237
I feel that this addition is more confusing than helpful, here?
(We're not introducing the term in this meaning, anywhere, as far as i can tell)
2023-11-28 20:14:55 +01:00
Heiko Schaefer
3235ad49d4
i think the rfc says that generic certifications are commonly used for third party certifications, while this section is about self-signatures 2023-11-28 20:06:24 +01:00
Heiko Schaefer
46f3ee92f5
further clarify 2023-11-28 19:54:15 +01:00
Heiko Schaefer
8719b9deb2
this addition seems mostly distracting to me? 2023-11-28 19:54:14 +01:00
Heiko Schaefer
e59e70939c
clarify certification key flag limitation 2023-11-28 19:37:06 +01:00
Heiko Schaefer
e187175d65
minor edits 2023-11-28 19:36:51 +01:00
5d096959de
Some minor changes to chapter 8 2023-11-27 22:03:21 +01:00
6700eddaba
There are different implementations of the WoT around, not all of them might use DK sigs as delegations afaik 2023-11-27 20:25:05 +01:00
Heiko Schaefer
3a921f6528
Merge branch 'draft' into tammi-ch8-heiko
# Conflicts:
#	book/source/08-signing_components.md
2023-11-25 23:09:12 +01:00
Heiko Schaefer
06c40b0275
i'm uncomfortable offering an explanation for this recommendation
(i don't think security is a concern here. maybe interoperability?)
2023-11-25 17:49:35 +01:00
Heiko Schaefer
43b26012de
minor tweak 2023-11-25 17:46:07 +01:00
Heiko Schaefer
77a0a69d78
clarify language 2023-11-25 17:43:30 +01:00
Heiko Schaefer
993da3ccf4
don't use the generic word "critical" in a context where it has a technical meaning 2023-11-25 17:39:47 +01:00
Heiko Schaefer
887c5bf0e6
remove dangling footnote syntax 2023-11-25 17:32:33 +01:00
Heiko Schaefer
127f36162c
move example texts into diagram notes 2023-11-25 17:32:33 +01:00
Heiko Schaefer
5887bcc880
edit "trust signature" text
- lean on the word "trust" as little as possible
- some clarifications
2023-11-25 17:32:33 +01:00
Heiko Schaefer
e49d1e69af
clarify certification text
And use Bob's real fingerprint.
2023-11-25 15:57:00 +01:00
Heiko Schaefer
4b9c064a8b
it seems confusing to imply that bob will necessarily distribute a third-party certification, this is only true some of the time 2023-11-25 15:43:24 +01:00
Heiko Schaefer
a3b5e263e3
add missing space 2023-11-25 15:36:40 +01:00
Heiko Schaefer
5f694e8c23
clarification: "append" implies "stored at the end of a file." this is not generally true for these two cases.
I now realize that this is weird: we're claiming that certificates are "append only". However, the meaning of that term, in OpenPGP is ... not about the location of additions. Rather it just means "we only get to add packets, not remove them". Regardless of packet order.
2023-11-25 15:11:17 +01:00
Heiko Schaefer
5faec16cb8
Improve on original text: "Elements" encompass both "components" and "signatures." Regarding malicious addition, we care about both.
Additionally, "typically" reads confusingly weak to me, erring on the side of "maybe too strong" with "will" seems better.
2023-11-25 14:56:17 +01:00
Heiko Schaefer
97e413a3dd
in our text, this fingerprint represents Alice's certificate (and isn't an example) 2023-11-25 14:53:00 +01:00
Heiko Schaefer
cdbf15e49a
clarify how the back signature is embedded 2023-11-25 14:47:34 +01:00
Heiko Schaefer
e05f104974
clarify enumeration of legitimate unbound packets
This is supposed to be a list of legitimate uses. I've removed the elaboration of the flooding problem, and replaced it with a link to an elaboration in ch4.
2023-11-25 14:16:30 +01:00
Heiko Schaefer
2580ae317d
typo fix 2023-11-25 13:06:08 +01:00
Heiko Schaefer
1a4ef8a975
clarify: the flag is not always set 2023-11-25 13:04:58 +01:00
Tammi L. Coles
e66d5158a8 fix apostrophe format 2023-11-25 11:24:00 +01:00
Tammi L. Coles
b834628558 restore language to table, clean up structure 2023-11-25 11:19:56 +01:00
Tammi L. Coles
09efc3db67 correct CertificationRevocation section 2023-11-25 11:09:32 +01:00
Tammi L. Coles
78b2766049 correct CertificationRevocation section 2023-11-25 11:09:11 +01:00
Tammi L. Coles
8fe5dfcf33 restore language of table but fix layout 2023-11-25 11:04:59 +01:00
Tammi L. Coles
8e81ed6b36 expand note for clarity 2023-11-25 10:57:40 +01:00
Tammi L. Coles
14a95e1907 push final edits of Ch8, clarify use of italics 2023-11-25 10:56:24 +01:00
Tammi L. Coles
8d4c1748c7 edit ch8 advanced section up to line 358 2023-11-23 17:39:31 +01:00
Tammi L. Coles
94abcc34f7 edit ch8 3rd party signatures 2023-11-23 16:44:21 +01:00
Tammi L. Coles
a8b17f8fe4 edit ch8 soft and hard revocations 2023-11-23 14:34:23 +01:00
Tammi L. Coles
f795da774d edit ch8 Revocation self-signatures 2023-11-23 14:24:05 +01:00