Breaking MIME concatenation

Daniel Kahn Gillmor dkg at fifthhorseman.net
Fri May 18 20:45:26 CEST 2018


On Fri 2018-05-18 13:50:00 +0000, Whitey wrote:
> Robert J. Hansen wrote:
>> I don't have concrete numbers here, but my suspicion is that GnuPG is a
>> package verification system that's useful for email... and most of the
>> problems people have with it as a package verification system stem from
>> the fact it was originally an email privacy system.
>
> Which might explain why some Linux distros are lax about updating GnuPG.
> Ancient versions work o.k. for package verification.

they won't be OK once the switch to ed25519 happens :/

     --dkg



More information about the Gnupg-users mailing list