small security glitches

[John A. Wallace]

Hello.  I was reading this page,
http://www.gnupg.org/faq/GnuPG-FAQ.html#cant-we-have-a-gpg-library , and I
found this comment near the end of it in the section entitled "How does this
whole thing work?":  "There is a small security glitch in the OpenPGP (and
therefore GnuPG) system; to avoid this you should always sign and encrypt a
message instead of only encrypting it."  If this is still applicable, would
you explain what the small glitch is?  Are there any other small glitches
explained elsewhere, which I may not have noticed?  There is a lot of
documentation, and I am hoping to absorb it as much as I can. Thanks.

 

John A. Wallace

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: </pipermail/attachments/20111101/0362fac1/attachment-0001.htm>