<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 16/04/2015 10:00, Werner Koch wrote:<br>
</div>
<blockquote cite="mid:87pp7478ip.fsf@vigenere.g10code.de"
type="cite">
<pre wrap="">On Wed, 15 Apr 2015 22:26, <a class="moz-txt-link-abbreviated" href="mailto:nbohm@ernest.net">nbohm@ernest.net</a> said:
</pre>
<blockquote type="cite">
<pre wrap="">The semantics of signing a PGP key are indeed obscure. It seems
</pre>
</blockquote>
<pre wrap="">
rfc4880, 5.2.1 actually explains on how the key signatures are used.
For example:
0x13: Positive certification of a User ID and Public-Key packet.
The issuer of this certification has done substantial
verification of the claim of identity.
But it also remarks
Most OpenPGP implementations make their "key signatures" as 0x10
certifications. Some implementations can issue 0x11-0x13
certifications, but few differentiate between the types.
9maybe in attempt not to be viewed as a PKI).
</pre>
<blockquote type="cite">
<pre wrap="">regrettable that there is no way for the signer to spell what the
signature is intended to mean.
</pre>
</blockquote>
<pre wrap="">
5.2.3.20. Policy URI
[...]
This subpacket contains a URI of a document that describes the policy
under which the signature was issued.
</pre>
</blockquote>
<br>
Thank you for this reference. I was unaware of the varieties of
assertions about signatures for which it provides, probably because
I have never come across an implementation which offered the user
the chance to employ them.<br>
<br>
Are there such implementations? If not, the subtleties which rfc
4880 offers are somewhat theoretical.<br>
<br>
Nicholas Bohm<br>
<div class="moz-signature">-- <br>
<style type="text/css">
A:link
{ text-decoration: none; color:#0000bb; }
A:visited
{ text-decoration: none; color:#990099; }
A:active
{ text-decoration: none; color:#bb0000; }
A:hover
{ text-decoration: underline; color:#bb0000; }
</style><span style="font-family: monospace;"><a
href="http://www.ernest.net/contact/index.htm">Contact
and PGP key here</a></span><br>
</div>
</body>
</html>