diff --git a/book/source/04-certificates.md b/book/source/04-certificates.md index 4ad0ff5..2fbb507 100644 --- a/book/source/04-certificates.md +++ b/book/source/04-certificates.md @@ -106,21 +106,25 @@ Subkeys have the same structural attributes as the primary key but fulfill a dif OpenPGP certificates can contain multiple subkeys. ``` -#### Key Flags: defining which operations a component key can perform +#### Defining operational capabilities with Key Flags ```{admonition} Warning Let's decide whether the capitalization of F is necessary. ``` -Each component key has a set of ["Key Flags"](https://www.ietf.org/archive/id/draft-ietf-openpgp-crypto-refresh-10.html#key-flags) that specify which operations that key can perform. +Each component key has a set of ["Key Flags"](https://www.ietf.org/archive/id/draft-ietf-openpgp-crypto-refresh-10.html#key-flags) that delineate the operations a key can perform. -The commonly used key flags are: +Commonly used key flags are: - **C**ertification (issuing third-party certifications) - **S**igning (signing data) - **E**ncryption (encrypting data) - **A**uthentication (commonly used for OpenPGP authentication) +```{admonition} Warning +Accessibility. Is the bolding of C, S, E, A compatible with screenreaders? Is it worth the effort? +``` + By convention, only the primary key is allowed to perform "certification" operations. All other operations can be configured on either the primary key or a subkey. ```{note}