On 24/02/20 22:28, Paul Wouters wrote: > We thought at some point it was no longer needed, but that was wrong. > Hence you seeing some confusion online. So yes, for raw (non-X.509) > keys, it is still needed. For X.509 certificates, it is not needed. Many thanks for clarifying. Cesare.