email-adress strings in comments

Ans ans at
Fri Jan 7 17:09:05 CET 2011


I just found out that it's possible to create keys with email adresses
in the comment field, like this:

uid                  sdgsdg sgsg (<test at>) <foo at>

which can trick the keylookup:

gpg --list-key "<test at>"

lists this key, even tough this would be just a comment.


More information about the Gnupg-devel mailing list