Dear WG, I am pretty sure that my interpretation of the standard is correct, but I would like to a) have it confirmed and b) make it known to other implementers The Revoacble flag as specified by RFC4880, Section 5.2.3.12, when set to 0, only forbids revocation by the issuer, but not by other revokers. In particular, if a revocation key (5.2.3.15) is present in addition to the above flag, it means that the designated revoker is allowed to revoke the certificate, but the issuer is not. The context is the implementation of IOU notes as self-signatures on PGP public keys, so that the PKS infrastructure can be used for their dissemination (and, thus, for credit reputation tracking). More on this at the upcoming FC2008, in Cozumel. ;-) -- Daniel
Attachment:
signature.asc
Description: Digital signature