[Announce] new gnupg snapshot
   
    Frank Tobin
     
    ftobin@uiuc.edu
       
    Sat Apr  7 19:54:09 2001
    
    
  
RJ Marquette, at 11:50 -0400 on Sat, 7 Apr 2001, wrote:
    > Well, it can't happen without the user noticing it anymore. Till now
    > you could import a bunch of public keys and this didn't prevent
    > importing of a secret key hidden amongst them. Now you see that
    > there's somebody trying to feed you with a secret key. You can of
    > course import it (in a second go with the --allow-secret-key-import
    > switch), but it doesn't work without you noticing it.
Aargh, noone has yet said why importing a secret key is bad, and should be
limited in any way.
They have talked about why importing trust is bad, but importing trust !=
importing a secret key.
-- 
Frank Tobin		http://www.uiuc.edu/~ftobin/