pub fn vouched(card: &KnownCard, certificate: &str) -> Option<Cert>Expand description
The certificate of a shared security key, when it is the key’s: its primary key’s fingerprint is the one the key’s record names, and it holds the keys the security key holds (signing, decryption). Anything else (a certificate replaced, another key’s, one missing a key the security key holds) is never taken for yours.
Checked through Sequoia’s policy, as check checks a certificate at
setup: the primary key valid and not revoked, the signing key bound to
it for signing, the decryption key for encryption, neither revoked; a key
with no binding, revoked, or bound by another key never makes the
certificate the security key’s (review of 19 October 2026, F3). Expired,
it is still the key’s: the window says so.