oss-sec mailing list archives

Re: Many vulnerabilities in GnuPG


From: Henrik Ahlgren <pablo () seestieto com>
Date: Wed, 31 Dec 2025 00:14:32 +0200

Peter Gutmann <pgut001 () cs auckland ac nz> writes:

Does anything actually use the cobweb of trust, or do you just assume the key
you've got is good because doing anything else is too hard?

Perhaps the Debian developer keyring would serve as a compelling
example? They even organize actual key-signing parties, which many
cryptography experts today appear to regard as "LARPing" or otherwise
ridiculous.


Current thread: