Subject: Re: [openpgp] signing COSE (RFC8152) artifacts with openpgp keys

From: Daniel Kahn Gillmor <[email-masked]>
Date: Thu, 06 Aug 2020 09:50:33 -0400

On Thu 2020-07-30 14:52:03 -0400, Michael Richardson wrote:
> Do you think it's appropriate to use the primary key?
> Would you consider that a specific purpose subkey would be better?

I tend to think that a specific purpose subkey would be better for novel
uses, though i agree with Santiago that i'd probably expect any
signing-capable key to work -- that could be either a dedicated
signing-capable subkey, or a primary key that is marked as
signing-capable.

        --dkg