[Announce] new gnupg snapshot

Frank Tobin ftobin@uiuc.edu
Sat Apr 7 19:54:09 2001


RJ Marquette, at 11:50 -0400 on Sat, 7 Apr 2001, wrote:

    > Well, it can't happen without the user noticing it anymore. Till now
    > you could import a bunch of public keys and this didn't prevent
    > importing of a secret key hidden amongst them. Now you see that
    > there's somebody trying to feed you with a secret key. You can of
    > course import it (in a second go with the --allow-secret-key-import
    > switch), but it doesn't work without you noticing it.

Aargh, noone has yet said why importing a secret key is bad, and should be
limited in any way.

They have talked about why importing trust is bad, but importing trust !=
importing a secret key.

-- 
Frank Tobin		http://www.uiuc.edu/~ftobin/