I was reading the FAQ and noticed that it uses the word 'certificate' to
describe what I think people commonly refer to as their 'key' (ref
gnupg-faq.html section 7.4 and 7.5) that they would upload to a 'key
server'.

* A certificate is a large data structure that contains one or more
/keys/, and optionally information that identifies the user, designated
revokers, who has vouched for this certificate, and so on.

* A keyserver is a service that publishes public-key certificates and
makes them searchable. You can upload your certificate to a keyserver so
that other users can find it.

Certificate makes sense to me (it contains multiple public keys and
other things) but common parlance uses 'key' and what should be called a
'certificate server' is called a 'key server'. The only place I've seen
it definitively called a 'certificate' is in the GnuPG documentation,
but RFC4880 casually mentions the relationship (in para 5.5.1.1):

* A Public-Key packet starts a series of packets that forms an OpenPGP
key (sometimes called an OpenPGP certificate).

I was just wondering whether I've misunderstood or if there is some
historic reason for my confusion.

Thanks,
John



Attachment: pgpEJJC4XzCBd.pgp
Description: PGP signature

_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Reply via email to