diff --git a/book/source/07-signing_data.md b/book/source/07-signing_data.md index 6a5458b..787e9fc 100644 --- a/book/source/07-signing_data.md +++ b/book/source/07-signing_data.md @@ -71,6 +71,8 @@ For efficient verification, an application must understand how to handle the lit :class: warning Is the signer keyid/fingerprint in the OPS important for the verifier to be able to verify the signature efficiently? Or is it (only?) there to be hashed and signed, along with the literal data? + +Realization: It's probably useful to know the fingerprints right away, to first go find the public key material, before calculating the hash of a huge file. ``` #### Verification