On Wed, Jan 27, 2016 at 07:53:09PM -0500, Daniel Kahn Gillmor wrote: > * authentication-capable subkeys that have no embedded cross > certification should probably have a yellow alert. Are there examples of authentication-capable subkeys with embedded cross-certs in the wild?