From e878c637b884a06f367587848a9a50decd0fd119 Mon Sep 17 00:00:00 2001 From: "Tammi L. Coles" Date: Thu, 2 Nov 2023 17:31:14 +0100 Subject: [PATCH] edit 118 to resolve https://codeberg.org/openpgp/notes/pulls/81#issuecomment-1291275 --- book/source/04-certificates.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/book/source/04-certificates.md b/book/source/04-certificates.md index 986cc14..0538595 100644 --- a/book/source/04-certificates.md +++ b/book/source/04-certificates.md @@ -114,8 +114,7 @@ Commonly used key flags include: - **Authentication**: primarily used for OpenPGP authentication ```{note} - -In line with best practices, distinct component keys should handle specific operations. The primary key should be reserved solely for certification, while separate subkeys should be used for signing, encryption, and authentication. Notably, in many algorithms, encryption capability is exclusive and cannot overlap with other operations[^key-flag-sharing]). +Distinct component keys handle specific operations. The primary key is reserved solely for certification, while separate subkeys are used for signing, encryption, and authentication. Subkeys lack certification capability. Notably, in many algorithms, encryption capability is exclusive and cannot overlap with other operations[^key-flag-sharing]). ``` [^key-flag-sharing]: With ECC algorithms, it's impossible to combine encryption functions with those intended for signing. For example, ed25519 is specifically used for signing; cv25519 is designated for encryption.