Am Do., 22. Sept. 2022 um 10:47 Uhr schrieb Justus Winter
<jus...@sequoia-pgp.org>:
>
> This replaces the old OpenPGPv4 key that is used in the test suite
> with a more modern OpenPGPv4 key.  All cryptographic artifacts in the

Both v4? Only one key file is named v4.


> @@ -6,7 +6,7 @@ Message-ID: <simple-signed-m...@crypto.notmuchmail.org>
>  MIME-Version: 1.0
>  Content-Type: multipart/signed; boundary="=-=-=";
>   protocol="application/pgp-signature";
> - micalg=pgp-sha512
> + micalg=pgp-sha256

You are downgrading the hash algo here and in the other regenerated
signatures. This is not wrong per-se, I'm just wondering whether it is
intentional (or forced by the standard) when the aim of this series is
future-proofing. sha256 is the current "replacement" for sha1, which
means it's the one which will be replaced next ;)

Michael
_______________________________________________
notmuch mailing list -- notmuch@notmuchmail.org
To unsubscribe send an email to notmuch-le...@notmuchmail.org

Reply via email to