-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
On Monday 9 May 2016 at 12:14:09 AM, in <mid:[email protected]>, Scott Mcdermott wrote: > (aside: the default key selected for a userid should > probably be > the later key anyways, I would think, under the > assumption that > one always want to use the newer key, not the oldest > one.) That would enable a "denial of service" attack: I publish a key containing your email address in a UID, people encrypt to my newer key instead of your older key. - -- Best regards MFPA <mailto:[email protected]> The second mouse gets the cheese -----BEGIN PGP SIGNATURE----- iQF8BAEBCgBmBQJXL91kXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRCM0FFN0VDQTlBOEM4QjMwMjZBNUEwRjU2 QjdDNzRDRUIzMUYyNUYwAAoJEGt8dM6zHyXwwMsH/2QGOr1ZzEoPPnAPRtYMpmBT 13j04mdzM1NeXZdYu5DbAiHEN53RkweXzvc/hVMW/mqL4QNnCZM3EUAKBt7dGbEE LjIUm2t+63UPMWXiR86ymqAdpXARtYkgiiyR1QfwFrGYoBuTAD2lnlxnTgRTW3DB 04uerMOewvVFOwlzdhnOLupC0yVnm17Bfvq87DUREwIji30toQJW54nReWRkcLKl AQvldNVW61baBCUi7DMPGp4q3BlByUMWI+rNmnUSu8G55eAaCKi0GZZYf3vD1foA 48q8pxcUV4xEj14bEw4mZKaVdoKTp0C+KwDowrN47lqmvO857o1KL3ApeIwTYRWI vgQBFgoAZgUCVy/dZF8UgAAAAAAuAChpc3N1ZXItZnByQG5vdGF0aW9ucy5vcGVu cGdwLmZpZnRoaG9yc2VtYW4ubmV0MzNBQ0VENEVFOTEzNEVFQkRFNkE4NTA2MTcx MkJDNDYxQUY3NzhFNAAKCRAXErxGGvd45D5uAQCrSsxNXD3oPdqDZIsaVeqlfCpQ 43P8qUkZ/8QHydbjmAEAw6xKvZ8AsSQXljFFHjUsDYdBK1DZY6grJHuxdMiwTgU= =lpNo -----END PGP SIGNATURE----- _______________________________________________ Gnupg-users mailing list [email protected] http://lists.gnupg.org/mailman/listinfo/gnupg-users
