Guilhem Moulin writes ("Re: Support WKD (and WKS) for @debian.org email addresses?"): > On Wed, 07 Nov 2018 at 18:20:16 +0000, Ian Jackson wrote: > > Personally I think the hash is bizarre. Why make this protocol depend > > on an obsolete hash function ? One could just url-encode the email > > address. The server could deal with case-folding etc. > > Dunno if you'll find the arguments convincing, but FWIW this was brought up to > gnupg-devel in May 2016: see > https://lists.gnupg.org/pipermail/gnupg-devel/2016-May/031068.html > and follow-ups in that thread.
Huh. Well, I followed the breadcrumbs to the spec and found an Internet Draft. So I decided that the IETF's openpgp list was the right place to make my comments. https://www.ietf.org/mail-archive/web/openpgp/current/msg09100.html Ian. -- Ian Jackson <ijack...@chiark.greenend.org.uk> These opinions are my own. If I emailed you from an address @fyvzl.net or @evade.org.uk, that is a private address which bypasses my fierce spamfilter.