<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style></head><body lang=DE link=blue vlink="#954F72"><div class=WordSection1><p class=MsoNormal><o:p> </o:p></p><div style='mso-element:para-border-div;border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal style='border:none;padding:0cm'><b>Von: </b><a href="mailto:gnupg-users@gnupg.org">vedaal via Gnupg-users</a><br><b>Gesendet: </b>Montag, 25. Februar 2019 22:09<br><b>An: </b><a href="mailto:justina@colmena.biz">justina colmena</a>; <a href="mailto:gnupg-users@gnupg.org">gnupg-users@gnupg.org</a><br><b>Betreff: </b>Re: Ok this is a stupid questions</p></div><p class=MsoNormal style='line-height:150%'><span lang=EN-US style='font-size:10.5pt;line-height:150%;font-family:"Arial",sans-serif'><o:p> </o:p></span></p><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 8.0pt;margin-left:7.5pt;margin-top:5.0pt;margin-bottom:5.0pt'><div><p class=MsoNormal style='line-height:150%'><span lang=EN-US style='font-size:10.5pt;line-height:150%;font-family:"Arial",sans-serif'>Why do you think GnuPG is useless if you check the source-code, run it on hardware you trust, and a Linux variant you trust, with a Chromium/Iron browser, and avoid anything google or microsoft or apple or any non-FOSS product? <o:p></o:p></span></p></div></blockquote><p class=MsoNormal style='mso-margin-top-alt:0cm;margin-right:36.0pt;margin-bottom:5.0pt;margin-left:0cm;line-height:150%'><span lang=EN-US style='font-size:10.5pt;line-height:150%;font-family:"Arial",sans-serif'><o:p> </o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:0cm;margin-right:36.0pt;margin-bottom:5.0pt;margin-left:0cm;line-height:150%'><span lang=EN-US style='font-size:10.5pt;line-height:150%;font-family:"Arial",sans-serif'>Why do you think FOSS is more secure? Do you think that people<o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:0cm;margin-right:36.0pt;margin-bottom:5.0pt;margin-left:0cm;line-height:150%'><span lang=EN-US style='font-size:10.5pt;line-height:150%;font-family:"Arial",sans-serif'>always check the source code, with every release of their OS updates or the GnuPG updates? I doubt that. And how about FOSS developers? Do they regularly check their sites if the code was exchanged and if their keys are already compromised? The detached signatures or hashes of FOSS software are not time stamped. Is / was FOSS, like GnuPG, ever audited by major and trustworthy institutions, were users could read reports about their findings? Can you always trust developers, because they have many sigs on their keys but not sign back the signers keys?<o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:0cm;margin-right:36.0pt;margin-bottom:5.0pt;margin-left:0cm;line-height:150%'><span lang=EN-US style='font-size:10.5pt;line-height:150%;font-family:"Arial",sans-serif'>I have learned in the past trust nobody. Therefore I would not rely<o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:0cm;margin-right:36.0pt;margin-bottom:5.0pt;margin-left:0cm;line-height:150%'><span lang=EN-US style='font-size:10.5pt;line-height:150%;font-family:"Arial",sans-serif'>on people from the GnuPG ecosystem and what they say.<o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:0cm;margin-right:36.0pt;margin-bottom:5.0pt;margin-left:0cm;line-height:150%'><span lang=EN-US style='font-size:10.5pt;line-height:150%;font-family:"Arial",sans-serif'><o:p> </o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:0cm;margin-right:36.0pt;margin-bottom:5.0pt;margin-left:0cm;line-height:150%'><span lang=EN-US style='font-size:10.5pt;line-height:150%;font-family:"Arial",sans-serif'>Last but not least don’t forget rule 41, for example, which allows the FBI to hack computers worldwide. And if they can hack and access computers then others can do so too. You also never read here best practice tips like use a second computer, not connected to the Internet, and GnuPG in command line mode. </span><span lang=EN-US style='font-size:10.5pt;line-height:150%;font-family:"Segoe UI Emoji",sans-serif'>😊</span><span lang=EN-US style='font-size:10.5pt;line-height:150%;font-family:"Arial",sans-serif'><o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:0cm;margin-right:36.0pt;margin-bottom:5.0pt;margin-left:0cm;line-height:150%'><span lang=EN-US style='font-size:10.5pt;line-height:150%;font-family:"Arial",sans-serif'>Regards<o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:0cm;margin-right:36.0pt;margin-bottom:5.0pt;margin-left:0cm;line-height:150%'><span lang=EN-US style='font-size:10.5pt;line-height:150%;font-family:"Arial",sans-serif'>Stefan<o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>