diff --git a/book/source/06-certifications.md b/book/source/06-certifications.md index 753f6a7..db77ab0 100644 --- a/book/source/06-certifications.md +++ b/book/source/06-certifications.md @@ -184,7 +184,7 @@ Otherwise, Alice could "adopt" Bob's signing subkey and convincingly claim that This is to prevent an attack where the attacker "adopts" the victims signing subkey as their own in order to claim ownership over documents which were in fact signed by the victim. Contrary to the `SubkeyBinding` signature, which is issued by the certificates primary key, the `PrimaryKeyBinding` signature is instead created by the subkey. -```{figure} diag/subkey_binding_backsig.png +```{figure} diag/subkey_binding_signatur_for_signing_sk.png Linking an OpenPGP signing subkey to the primary key with a binding signature, and an embedded primary key binding signature ``` diff --git a/book/source/diag/subkey_binding_signatur_for_signing_sk.png b/book/source/diag/subkey_binding_signatur_for_signing_sk.png new file mode 100644 index 0000000..d4cc751 Binary files /dev/null and b/book/source/diag/subkey_binding_signatur_for_signing_sk.png differ diff --git a/book/source/diag/subkey_binding_signature.png b/book/source/diag/subkey_binding_signature.png index b4f37b6..0a68fd5 100644 Binary files a/book/source/diag/subkey_binding_signature.png and b/book/source/diag/subkey_binding_signature.png differ diff --git a/book/source/diag/user_id_certification.png b/book/source/diag/user_id_certification.png index 5f4c7e5..1765602 100644 Binary files a/book/source/diag/user_id_certification.png and b/book/source/diag/user_id_certification.png differ