> As for the current version v4, SHA1 is used to compute the fingerprint. > Are there other mandatory places?
Yes. Search the RFC for the term "SHA-1" and you'll find them. It's hardwired into several of the packet formats, for instance. > Do you know any time frame and significant changes of v5 specs? No. The WG is being annoyingly slow. _______________________________________________ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users