MFPA on 2016/05/09 +0100 @01:44:19: > > (aside: the default key selected for a userid should > > probably be the later key anyways, I would think, under the > > assumption that one always want to use the newer key, not > > the oldest one.) > > That would enable a "denial of service" attack: I publish a > key containing your email address in a UID, people encrypt to > my newer key instead of your older key.
I'm talking about signing, not encrypting, which uses my own secret key, not a published key. -- Scott _______________________________________________ Gnupg-users mailing list [email protected] http://lists.gnupg.org/mailman/listinfo/gnupg-users
