diff --git a/book/source/08-signing_components.md b/book/source/08-signing_components.md index cbf184e..c33276e 100644 --- a/book/source/08-signing_components.md +++ b/book/source/08-signing_components.md @@ -12,6 +12,12 @@ In this chapter, we'll consider OpenPGP signatures that apply to components. Tha - Component keys (primary keys or subkeys), or - Identity components (User IDs or User attributes). +This chapter adds a lot of detail to the material we discussed in the {ref}`certificates_chapter` chapter. Signatures on components are a crucial mechanism for forming OpenPGP certificates (which combine component keys and identities, via signatures on those components). + +Additionally, signatures on components play a crucial role for authentication of identities. Mechanisms for decentralized authentication are one of OpenPGP's core strenghts, we'll look into how they work. + +Finally, signatures on components are also a central mechanism for life-cycle management of OpenPGP certificates and their components. This includes defining or changing expiration dates, or issuing revocations, for certificates or their components. + ## Self-signatures and third-party signatures There are two important scenarios to distinguish: