Re: [Sks-devel] multiple subkey binding

[David Shaw]

On Wed, Dec 03, 2003 at 12:19:29PM -0500, Jason Harris wrote:
> On Wed, Dec 03, 2003 at 04:56:01AM -0500, David Shaw wrote:
> > On Tue, Dec 02, 2003 at 09:51:59PM +0100, Peter Palfrader wrote:
> > 
> > > I wonder if the 'multiple subkey binding' thing is SKS's fault?
> > > 
> > > I recently upgraded from 1.0.4 to 1.0.5, ran update_subkeys, and merged
> > > in a keydump from kjsl.
>  
> > I think you may have learned them from kjsl.  I seem to recall an
> > interaction between the kjsl modified pksd and a vanilla pksd at one
> > point.
> 
> FWIW, the keys Peter reported all have "duplicate" subkey binding
> signatures with the same date and top two hash bytes, where one has
> a type 101(?) subpacket (an GPG-ism from earlier versions) and the
> other doesn't.  Good keyservers don't modify packets...

Interesting.  Is the 101 subpacket hashed or not?

If it's hashed, it's more likely a PGP x.509 subpacket.

GnuPG never exported the local subpackets, so someone would have to
make an extreme effort to get them onto the server.

David