Daniel Huigens

Hello :wave: Apologies for the delayed response. I would argue that the vCard topic is not specific to cold emailing; it can also be used for transferring your contacts+encryption statuses...

> So I would ask to add the pre-hash variant, as that is what we need for using it in Thunderbird (via RNP, which uses Botan) according to what will...

This is essentially an issue in [go-crypto](https://github.com/ProtonMail/go-crypto), as it can't read the key. I've recorded this in https://github.com/ProtonMail/go-crypto/issues/250.

The most up-to-date draft is https://www.ietf.org/archive/id/draft-ietf-openpgp-pqc-02.html, at the moment :) As it was adopted by the OpenPGP Working Group, it's now an IETF draft instead of a personal draft.

Ah, interesting, thanks for the pointer. That does look like exactly what we need, and it's good to know that there are other uses cases, as well :) In that...

`sequence` wouldn't serve our use case because it makes a copy of all the data, whereas > we explicitly want to allow the function to retain a reference to the...

Right, OK. But it still requires all `BufferSource`s to be in memory at the same time, so it doesn't enable "real" incremental hashing (e.g. imagine a generator which computes or...

> The intention is for all keys used by this API to be origin-scoped, however it’s still open for debate how we should enforce that in the spec. Is it...

OpenPGP.js also likes the signature: ```bash $ sopenpgpjs verify msg.txt.sig x.cert < msg.txt 2025-10-16T09:49:18Z 166EBA1BBC57ACDA25BF4D45564EEF3CA05C50EA 166EBA1BBC57ACDA25BF4D45564EEF3CA05C50EA mode:text {"signers":["x.cert"]} ``` And, as far as I can tell, the newline normalization in...

FWIW, in #110 I proposed `UserKey`, to reflect that this is a key that belongs to the user (which also sort of implies they should be synced between their devices)....