On 08/17/2016 05:04 PM, Bernhard Reiter wrote: > Am Mittwoch, 17. August 2016 16:53:57 schrieb Werner Koch: >> FWIW, I really wonder why people seem to use the keyid to check keys. > > It is not done to check keys, it done to distinquish keys to select > in user interfaces.
At which point even short keyid isn't an issue as long as they only select amongst valid keys to begin with, unless they actually have two people with colliding keyids by coincidence that they communicate with. -- ---------------------------- Kristian Fiskerstrand Blog: https://blog.sumptuouscapital.com Twitter: @krifisk ---------------------------- Public OpenPGP certificate at hkp://pool.sks-keyservers.net fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3 ---------------------------- "We can only see a short distance ahead, but we can see plenty there that needs to be done." (Alan Turing)
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users