Please remove MacGPG from gnupg.org due to serious security concerns

Robert J. Hansen rjh at sixdemonbag.org
Fri Sep 11 16:19:15 CEST 2015


> The source in question is on GitHub
> at https://github.com/GPGTools/localizeXIB and the binary is no longer
> required to compile pinentry-mac.

Given we've already had this conversation (about the inappropriateness
of binary blobs in what should be FOSS software) once, I feel the need
to say that the more times this happens the less trust people will have
in GnuPG and the GnuPG ecosystem.

It's *really* *important* that the major tools surrounding GnuPG be
FOSS, and can be built entirely without depending on closed-source blobs.




More information about the Gnupg-users mailing list