ProtonMail/gopenpgp

GopenPGP 2.7 partially supports "v5", this may be seen as an endorsement

teythoon opened this issue · 0 comments

GopenPGP 2.7 supports draft-koch-openpgp-2015-rfc4880bis (aka "v5 OpenPGP"), at least partially, to increase compatibility with newer versions of GnuPG 2.4.x. This is a noble cause, but may unfortunately be seen and sold as an endorsement of "v5" and we have seen this being used to delegitimize the standardization effort of the IETF OpenPGP working group.

Please drop support for "v5", alternatively disable it by default and put it behind a configuration flag. I believe that GopenPGP 3 has already either dropped support, or disabled it by default.