Differences between 1.2.2 and 1.4.1rc2. was: Help with v1.4.0.

[John Clizbe]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Maj. Dennis Bludnok, Ret. wrote:
> Thanks for the help so far everyone.
> I've been able to download the new version from a different network.
> I think the firewall at my office doesn't like FTP sites.
> 
> My other question was:
> Is the old version I have at the moment vulnerable to any attacks or
> bugs that were fixed in the new version, or will the upgrade just
> provide more functionality?

The ElGamal Signing Key bug was fixed in 1.2.4 (IIRC). It only affected a
small number of non-default keys.  The 1.4.x releases also add the newer
SHA-256|384|512 Hash functions.  I'd recommend upgrading to the 1.4 series.

- --
John P. Clizbe                      Inet:   John (a) Mozilla-Enigmail.org
You can't spell fiasco without SCO. PGP/GPG KeyID: 0x608D2A10
"what's the key to success?"        / "two words: good decisions."
"what's the key to good decisions?" /  "one word: experience."
"how do i get experience?"          / "two words: bad decisions."

"Just how do the residents of Haiku, Hawai'i hold conversations?"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1rc2 (MingW32)
Comment: When cryptography is outlawed, b25seSBvdXRsYXdzIHdpbGwgdXNlIG
Comment: Be part of the £33t ECHELON -- Use Strong Encryption.
Comment: It's YOUR right - for the time being.
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFCNWV6HQSsSmCNKhARAvACAKCGqv1MZXChFGISLdfB65QjQT4n2gCfSVns
DB4cF967bhO/d9Rvfi3wp3s=
=A/Kk
-----END PGP SIGNATURE-----