Re: PATCH: Less fragile lookup of gpg key
On May 2, 2010, at 8:59 PM, Greg A. Woods wrote:
> I'm not an expert on PGP internals or such, but I think that's a really
> bad thing to do. I'm surprised you were able to get gpg to do it in the
> first place. I would have hoped it wouldn't allow it. As far as I can
> tell it's _not_ compatible with other implementations of PGP.
> You can of course have more than one e-mail address per key, but you
> should NEVER have more than one key per e-mail.
This is pretty common actually. At the very least it will happen if people are trying to transition between an older and a newer key --- for example, if they are trying to move from a less secure crypto algorithm to a more secure crypto algorithm.
And most versions of PGP support it _just_ _fine_.
They may not pick the key I want, but that's why I have environment or config files set up in various programs which use PGP to use a specific PGP KeyID.
-- Ted
Theodore Tso <tytso@mit.edu>