[Announce] new gnupg snapshot
Andrew McDonald
andrew@mcdonald.org.uk
Fri Apr 6 21:34:12 2001
On Fri, Apr 06, 2001 at 07:40:48PM +0200, Johan Wevers wrote:
> Werner Koch wrote:
>
> > * Secret keys are no longer imported unless you use the new option
> > --allow-secret-key-import.
>
> Why is that? What was the problem with importing secret keys?
IIRC, if you have a secret key it is ultimately trusted by default.
Persuading you to import a secret key could, therefore, subvert your
web of trust.
--
Andrew McDonald
E-mail: andrew@mcdonald.org.uk
http://www.mcdonald.org.uk/andrew/