On Thu, Dec 6, 2012 at 4:02 AM, Paul Tagliamonte wrote:

> While the traceback is ugly, that's valid. Note 0xDEFACED isn't 8 long,
> it's 7. Even though it's unlikely we'd get that key, I figured the DD
> would use a UID that's valid.

Anything less than the full fingerprint (8, 7 or whatever) should be
considered ambiguous[1]. If there are multiple keys matching the
partial fingerprint (of any size), that should be an error. I don't
think a partial fingerprint that is 7 characters long should be
treated any different than one that is 8 characters.

1. http://www.asheesh.org/note/debian/short-key-ids-are-bad-news

-- 
bye,
pabs

http://wiki.debian.org/PaulWise


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/CAKTje6E+yuMn4+WEqj_gqriPzwmTh5YBpe-Xu+FM7Y=pg9y...@mail.gmail.com

Reply via email to