TOFU

Stefan Claas stefan.claas at posteo.de
Fri Jun 9 15:50:31 CEST 2017


On 07.06.17 14:24, Peter Lebbing wrote:
> On 07/06/17 13:49, Stefan Claas wrote:
>> In Enigmail with the blue and green bar (without showing statistics) it
>> would simply mean
>> that it switches from green to blue, right?
> Not necessarily!
>
I have one more question if you don't mind. One of my tests showed
me the difference between the classic way Enigmail handles the
Untrusted blue signatures and how TOFU handles this.

Now my question as a Mac dummie and TOFU newbie. If Mallory would
gain tomorrow access to my Computer, but not to my passphrase and
he would replace one pub key in my pubring and modify the TOFU
database, how would TOFU handle this? Would TOFU alert me again
that there is a second key with the same email address?

Regards
Stefan





More information about the Gnupg-users mailing list