[dewyatt]

I can probably agree on the packet format, it's excessively flexible and easy to implement insecurely.

[tptacek]

You can probably agree about the PGP packet design?

[dewyatt]

Yes, it depends on what you mean. The packets themselves aren't a big deal to me, it's more the ability to construct them in arbitrary ways that concerns me.