home.social

#gpgfail — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #gpgfail, aggregated by home.social.

  1. #GnuPG 2.2.53-freepg has been released.

    It contains all the latest bug fixes from upstream GnuPG, plus the usual FreePG patches.

    In addition, a fix for the default filename path traversal issue identified by #gpgfail has been backported from upstream 2.5.16 (gpg.fail/filename)

    gitlab.com/freepg/gnupg/-/rele

  2. Relax 😎! GPG is not OpenPGP!

    Yesterday, vulnerabilities were published gpg.fail but they don't affect #deltachat or other #chatmail clients because

    A) We never used #gnupg for anything; we use the modern #rustlang #openpgp implementation @rpgp, security audited multiple times.

    B) #openpgp is fine, as modernized in #RFC9580, which already warns against several #gpgfail issues (gpg didn't implement that spec)

    Please spread the word that #gpg is not #openpgp ... Thanks! #39c3

  3. Relax 😎! GPG is not OpenPGP!

    Yesterday, vulnerabilities were published gpg.fail but they don't affect #deltachat or other #chatmail clients because

    A) We never used #gnupg for anything; we use the modern #rustlang #openpgp implementation @rpgp, security audited multiple times.

    B) #openpgp is fine, as modernized in #RFC9580, which already warns against several #gpgfail issues (gpg didn't implement that spec)

    Please spread the word that #gpg is not #openpgp ... Thanks! #39c3

  4. Relax 😎! GPG is not OpenPGP!

    Yesterday, vulnerabilities were published gpg.fail but they don't affect #deltachat or other #chatmail clients because

    A) We never used #gnupg for anything; we use the modern #rustlang #openpgp implementation @rpgp, security audited multiple times.

    B) #openpgp is fine, as modernized in #RFC9580, which already warns against several #gpgfail issues (gpg didn't implement that spec)

    Please spread the word that #gpg is not #openpgp ... Thanks! #39c3

  5. Relax 😎! GPG is not OpenPGP!

    Yesterday, vulnerabilities were published gpg.fail but they don't affect #deltachat or other #chatmail clients because

    A) We never used #gnupg for anything; we use the modern #rustlang #openpgp implementation @rpgp, security audited multiple times.

    B) #openpgp is fine, as modernized in #RFC9580, which already warns against several #gpgfail issues (gpg didn't implement that spec)

    Please spread the word that #gpg is not #openpgp ... Thanks! #39c3

  6. Relax 😎! GPG is not OpenPGP!

    Yesterday, vulnerabilities were published gpg.fail but they don't affect #deltachat or other #chatmail clients because

    A) We never used #gnupg for anything; we use the modern #rustlang #openpgp implementation @rpgp, security audited multiple times.

    B) #openpgp is fine, as modernized in #RFC9580, which already warns against several #gpgfail issues (gpg didn't implement that spec)

    Please spread the word that #gpg is not #openpgp ... Thanks! #39c3

  7. A lot of us have have been complaining about GnuPG for years but gpg.fail/ takes no prisoners on all sides🔥

    #39c3 #gnupg #gpgfail #sequoiapgp

  8. A lot of us have have been complaining about GnuPG for years but gpg.fail/ takes no prisoners on all sides🔥

    #39c3 #gnupg #gpgfail #sequoiapgp

  9. A lot of us have have been complaining about GnuPG for years but gpg.fail/ takes no prisoners on all sides🔥

    #39c3 #gnupg #gpgfail #sequoiapgp

  10. A lot of us have have been complaining about GnuPG for years but gpg.fail/ takes no prisoners on all sides🔥

    #39c3 #gnupg #gpgfail #sequoiapgp

  11. A lot of us have have been complaining about GnuPG for years but gpg.fail/ takes no prisoners on all sides🔥

    #39c3 #gnupg #gpgfail #sequoiapgp