Don't Panic.

Robert J. Hansen rjh at sixdemonbag.org
Mon May 14 09:27:42 CEST 2018


[taps the mike]

Hi.  I maintain the official GnuPG FAQ.  So let me start off by
answering a question that is certainly about to be asked a lot: "Should
we be worried about OpenPGP, GnuPG, or Enigmail?  The EFF's advising us
to uninstall it!"

https://www.eff.org/deeplinks/2018/05/attention-pgp-users-new-vulnerabilities-require-you-take-action-now

Werner saw a preprint of this paper some time ago.  I saw it recently.
Patrick Brunschwig of Enigmail saw it.  None of us are worried.  Out of
respect for the paper authors I will skip further comment until such
time as the paper is published.

It would've been nice if EFF had reached out to us for comment, rather
than apparently only talking to the paper authors.  We hope they'll
reach out next time.




More information about the Gnupg-users mailing list