> Well. There are two proposals. If we go with the subkey proposal, we'd not implement the simple protocol, solving that issue. Avoiding that concrete exploit.

> Well. There are two proposals. If we go with the subkey proposal, we'd not implement the simple protocol, solving that issue. Avoiding that concrete exploit. The lack of domain separation design flaw remains. :) As typical for design flaws it may not be meaningfully exploitable at any given time. Doesn't mean it isn't a design flaw.