[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <87h5t7aa7r.fsf@noux.seestieto.com>
Date: Wed, 31 Dec 2025 00:14:32 +0200
From: Henrik Ahlgren <pablo@...stieto.com>
To: oss-security@...ts.openwall.com
Cc:
Subject: Re: Many vulnerabilities in GnuPG
Peter Gutmann <pgut001@...auckland.ac.nz> writes:
> Does anything actually use the cobweb of trust, or do you just assume the key
> you've got is good because doing anything else is too hard?
Perhaps the Debian developer keyring would serve as a compelling
example? They even organize actual key-signing parties, which many
cryptography experts today appear to regard as "LARPing" or otherwise
ridiculous.
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
