#10495: Better way - Leftover tor gpg signing key in the local user's gpg 
keychain
in the documentation
-----------------------------+--------------------
     Reporter:  daffyduck    |      Owner:
         Type:  enhancement  |     Status:  closed
     Priority:  normal       |  Milestone:
    Component:  Website      |    Version:
   Resolution:  wontfix      |   Keywords:
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+--------------------
Changes (by Sebastian):

 * status:  new => closed
 * resolution:   => wontfix


Comment:

 All the solutions that never put the key into the user's keychain are
 insecure, because gpg never checks that it actually got the right key
 reliably. Having one more key in the keyring isn't an issue as far as I'm
 concerned. Please reopen if I'm overlooking a problem

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10495#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
[email protected]
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Reply via email to