Forgot your password?
typodupeerror

Comment Some facts about the flaw (Score 2, Informative) 151

In an effort to inject some facts here:

  1. This does not apply to signed software tarballs (like the Linux kernel)

  2. This does not apply to PGP/MIME signed email messages (a la mutt, Enigmail, etc)

  3. This does not apply to clearsigned email messages (a la everything else)

This applies to a very specific case where a message is constructed by hand with multiple data packets and a single signature packet, so:

  1. It might apply to PGP/MIME signed+encrypted email messages.

  2. It might apply to sign+encrypted messages in general.

  3. It might apply to unencrypted-but-binary-signed messages (essentially signed+encrypted without the encryption - generally not used much).


I say "might" as in all of these cases it depends on how GnuPG is called.

Slashdot Top Deals

It is better to give than to lend, and it costs about the same.

Working...