[OT] Why are you using the GPG / PGP keys?
Daniel Kahn Gillmor
dkg at fifthhorseman.net
Wed May 29 19:39:24 CEST 2013
On 05/29/2013 01:28 PM, Johan Wevers wrote:
> Further they deliver the private key to you, so they have access to it.
is this really the case? There is no way to supply them with a certreq
without the secret key material? I would find that really surprising,
and it should be better publicized if that's so.
> A BIG security hole, especially since they're (also) US based,
actually, startssl is based in israel. whether that's better or worse
than being based in the US, i leave as an exercise to the reader.
--dkg (who is based in the US)
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 1027 bytes
Desc: OpenPGP digital signature
More information about the Gnupg-users