On 6/2/2015 at 3:49 PM, "Robert J. Hansen" <r...@sixdemonbag.org> wrote:

>Given this, I would feel much better if Werner were to spend his 
>time reviewing the code for exploitable bugs than spending even five 
>minutes changing the s2k default from AES-128 to AES-256.

=====

Agreed,
but here's a consequence you might want to consider adding into your FAQ :

The s2k default is also the default for symmetrically encrypted messages
(which is fine, as long as people know about it).

If a person wants to symmetrically encrypt a message or file with AES 256,
or any other symmetric algorithm,
then the user will need to specify the option either in gnupg.conf or on the 
command line.


vedaal



_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Reply via email to