i'm uncomfortable offering an explanation for this recommendation

(i don't think security is a concern here. maybe interoperability?)
This commit is contained in:
Heiko Schaefer 2023-11-25 17:48:10 +01:00
parent 43b26012de
commit 06c40b0275
No known key found for this signature in database
GPG key ID: DAE9A9050FCCF1EB

View file

@ -409,7 +409,7 @@ In OpenPGP, certain subpackets are universally expected across all types of sign
The key used as the issuer in the signature might be a subkey of the certificate.
```
This subpacket can be placed in either the hashed or unhashed area due to its self-authenticating nature. However, it is recommended to include it in the signature's hashed area for enhanced security.
This subpacket can be placed in either the hashed or unhashed area due to its self-authenticating nature. However, we recommend including it in the signature's hashed area.
### Managing subpacket conflicts and duplication