missing 'key'

This commit is contained in:
Paul Schaub 2023-11-28 22:11:30 +01:00
parent e3c76587e3
commit 326f1541cb
Signed by: vanitasvitae
GPG key ID: 62BEE9264BF17311

View file

@ -49,7 +49,7 @@ Third-party signatures are used to make specific statements:
- revoking, and thus invalidating, prior third-party signature statements
```{note}
The **certify others** [key flag](https://www.ietf.org/archive/id/draft-ietf-openpgp-crypto-refresh-12.html#name-key-flags) (`0x01`) is required to issue third-party signatures. By convention[^primary-certification], only the certificate's primary can hold this key flag.
The **certify others** [key flag](https://www.ietf.org/archive/id/draft-ietf-openpgp-crypto-refresh-12.html#name-key-flags) (`0x01`) is required to issue third-party signatures. By convention[^primary-certification], only the certificate's primary key can hold this key flag.
```
[^primary-certification]: Implementations currently assume that only the primary key may hold the "certify others" key flag. However, the RFC doesn't clearly specify this limitation.