<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
On 21/05/2018 02:12, Jochen Schüttler wrote:<br>
<blockquote cite="mid:968cda26-39d5-6f0c-c771-e264ddd89f62@gmx.de"
type="cite">
<pre wrap="">I'm all for breaking backwards compatibility.
What's the worst the haters can do? Turn their back on GnuPG? Shout out
really loud once more? I think they should get a life!
</pre>
</blockquote>
<br>
I rather suspect they do have a life supporting scenarios that they
cannot change that require legacy-decryption capability.<br>
<br>
If legacy-decryption was removed entirely from current versions of
GnuPG then they would simply have to continue using old,
unsupported, and potentially vulnerable versions. I do not think it
is reasonable to just cut them off entirely.<br>
<br>
As Philipp Klaus Krause [1] and Dirk Gottschalk [2] pointed out
above, breaking backward compatibility does not have to be (and
should not be in my opinion) absolute. The ability to decrypt old,
legacy-encrypted data is, like it or not, still present in the real
world and it is therefore surely proper for GnuPG to retain the
ability to decrypt such data in maintained code (albeit whilst
requiring users to take action to make changes to their
configuration to be able to continue decrypting such data using
GnuPG).<br>
<br>
I agree with those who say that there is no need for mail clients to
be able to decrypt legacy-encrypted data.<br>
<br>
<br>
<br>
<br>
[1]
<a class="moz-txt-link-freetext" href="https://lists.gnupg.org/pipermail/gnupg-users/2018-May/060473.html">https://lists.gnupg.org/pipermail/gnupg-users/2018-May/060473.html</a><br>
[2]
<a class="moz-txt-link-freetext" href="https://lists.gnupg.org/pipermail/gnupg-users/2018-May/060474.html">https://lists.gnupg.org/pipermail/gnupg-users/2018-May/060474.html</a><br>
<br>
<pre class="moz-signature" cols="72">--
Mark Rousell
PGP public key: <a class="moz-txt-link-freetext" href="http://www.signal100.com/markr/pgp">http://www.signal100.com/markr/pgp</a>
Key ID: C9C5C162
</pre>
</body>
</html>