re GPG 2.0

[David Shaw]

On Apr 3, 2008, at 1:40 PM, Michael wrote:

> ~ My question is should I upgrade to 1.4.9 for any particular  
> reason? My
> understanding was that .8 is still more or less "current". Is .9 a
> security upgrade?

Yes.  The flaw is not trivially exploitable, but there is always a  
chance.

> ~ As an aside, I have an older version 1.4.1 I think on an older  
> machine
> that runs an old linux system (Red Hat 9 to be specific) and I think
> keys created on that machine are compatible with 1.4.9, however on an
> even older system (Red Hat 7) I recall building a version of gpg 1.2.3
> with the help of rpm. Would keys created with that version be usable  
> or
> are they incompatible?

Very usable.  GPG follows the OpenPGP standard, so any version of GPG  
should be able to handle any OpenPGP key.

David