TB weirdness

[Andrew Gallagher]

On 24/02/2022 16:59, Robert J. Hansen via Gnupg-users wrote:
>> Sounds like a defect to me, do you have a problem report ticket with
>> Thunderbird or a forum entry which described the problem in more detail
>> (like which version is affected).
> 
> It turns out the actual behavior is a little different than I originally 
> described.  If you have a valid certificate with a given email address, 
> and a revoked certificate (or certificates) with that same email 
> address, it will silently add the revoked certificates, as well as the 
> valid one, to your email.  This is still a bad idea.

I can confirm this happened to me when I specifically ticked "Attach my 
public key" in TB's composer - it also attached the revocation cert for 
an ancient key that I still have in my keyring but never used for anything.

-- 
Andrew Gallagher

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20220224/9db5169e/attachment.sig>