On Sun, 7 Nov 2004, Jorgen Cederlof wrote:
Date: Sun, 7 Nov 2004 20:14:13 +0100 From: Jorgen Cederlof jc@lysator.liu.se To: Henk P. Penning henkp@cs.uu.nl Cc: wotsap-updates@lists.lysator.liu.se Subject: Re: [Wotsap-updates] Welcome and new .wot file format Sender: wotsap-updates-admin@lists.lysator.liu.se
On Sun, Nov 07, 2004 at 19:32:23 +0100, Henk P. Penning wrote:
On Sun, 7 Nov 2004, Jorgen Cederlof wrote:
http://www.lysator.liu.se/~jc/wotsap/wotfileformat-0.2.txt
If you find bugs or typos, please tell me.
May I suggest that the wot version is encoded into the signatures file. [...] This way the file is 'self contained' and the software can find out how to interpret the file, without resort to the WOTSAP files.
I had never intended the signatures part of a .wot file to be used on its own, and I can think of very few reasons to do so. Since the file format version is encoded in the WOTVERSION part, I see no reason to also include it in the signatures part. Or am I misunderstanding you?
For my 'strong set analysis' I only use (and keep) the signatures. The analysis is 'anonymous', so to speak. It is just not handy to keep the WOTVERSION around just to be able to interpret the signatures file. Note that many types of files put type+version stuff in the file.
Such keys are not supposed to be included. Did you find a key like that in the example 0.2 file?
The 0.2 description says:
The 4-bit signature type is interpreted as:
The two least significant bits are the cert check level (0-3) of the signature on the primary user ID, or the highest cert check level if the primary user ID is not signed. Bit 2 is set if and only if the primary user ID is signed. Bit 3 is reserved and set to zero.
I must confess I don't quite understand the implications, but it seemed that "unsigned uid's" introduce extra complications that could be avoided if such keys/uids/sigs are discarded in the strong set.
Jörgen
HPP
---------------------------------------------------------------- _ Henk P. Penning, Computer Systems Group R Uithof CGN-A232 _/ _ Dept of Computer Science, Utrecht University T +31 30 253 4106 / _/ \ Padualaan 14, 3584CH Utrecht, the Netherlands F +31 30 251 3791 _/ _/ http://www.cs.uu.nl/staff/henkp.html M penning@cs.uu.nl _/