Skip to Content.
Sympa Menu

cacert-devel - Re: Security Issue https://bugs.cacert.org/view.php?id=1473

Subject: CAcert Code Development list.

List archive

Re: Security Issue https://bugs.cacert.org/view.php?id=1473


Chronological Thread 
  • From: Karl-Heinz Gödderz <GuKKDevel AT CAcert.org>
  • To: cacert-devel AT lists.cacert.org
  • Subject: Re: Security Issue https://bugs.cacert.org/view.php?id=1473
  • Date: Tue, 7 Jan 2020 13:20:17 +0100
  • Autocrypt: addr=GuKKDevel AT CAcert.org; prefer-encrypt=mutual; keydata= xsJuBFdsG00RCAD6pPUV5R6cTpmnEOLntD7NjXAQj/KCOXdw8AFH4K2SYuJVSpY2R1x4lbey aDHif4R7C5qUyai3um2GQtw5PEj42CgFsjPG6jAACqS+PRFD+JU/cMWGc/lCnfiM5gyptPdO eCp86p50+LRcltoltgDVC9/XGx5W3ejFLOIUX17ZIXzoq/HQZsAoe5arIUy4XOB8q+PC5Os0 HVd/pbiDWQIF7pYrqwh2gMWoVGuRZHkfmch/F3ozx+0MZ1Fz3W/h3Ljht3mWSmcZzt6QYkSq Xhqa27sXUeS8ZTESeymgB3RvP6DZ0ni90xBYJ97GZ0kIGqvCZm8vuiCA3AMqxi0RrAMbAQDZ XK7pxmlb/uKTsIS0W27oaGtcisylDoNTMFct3n9EqQf+PhT6WIrgeHHEKpn/aczZRwgBgUtx AZAxx3RY4WvmatvNSuxgWkP5cEpBL+yaLeqJ1o3Zd+47kH2k0rpwCjTEC/EIhXnQqy3Lm7r6 S3DAhuEwQPFLUOS/QOsSAyU/bJKmOL2paCVnM/jSUJt6elvLpuSUR3akRUozBjhPXf4JxDao K1EyuFAAD0ddSjBV3Wh9dquLG4p0fsmbR0EczI7qa3BKyrxp9dveCwUf7PHnmW5PrYjPHneh BbvZiLIU/lQ3QhT5gSHqH8SKs2Z3/8ZEpJ/xpJQB7beGKg43aAyUu9WwQy+YbS84qU3CkP0+ ikNo4KbQyYf7RJGJ/a2S3Q1mLQgAvhsn/ik9+QVrYq+YnFy/Ws6VfVb6U4RPXVVfmeDv4GHq ySJlwt4o8SuGiyETw93wO/y1POr2waNs0tmWkOwUE3+aQAl2PTV/9KfoH73//2YkIyhRaI27 zrLgZPq3LrPFlfLhIuvogYh/19xraM8cMWr+tBSOimiO6KWbwDbQ9wb/ldk+Oap4CCx3qaSs xh8u+7HCKtXvuoamrjnmcydaoUmueqkEsmmRUIa0IDDY9BqxQaZq5PtbVWFdOu5VhNir1Z2B sWBzgSWTAPaJertImzNwZgD7aZfHKBmSCu52GNZBCxQuur5ErQVSZqqBE4nWHSwoDnP+YzGC cTOLJ1GETc0qS2FybC1IZWlueiBHw7ZkZGVyeiA8R3VLS0RldmVsQENBY2VydC5vcmc+wnoE ExEIACIFAldsG00CGyMGCwkIBwMCBhUIAgkKCwQWAgMBAh4BAheAAAoJEClG3UA/P4iByxoA /iuid0zYHIl0Rk5ztgEaqUVkTNxF2z5LDW295L+3vTtUAP9Y3s9ESO6Si30JAhWEtN/VoL/P yluB80lvFPaRC2pTMM7BTQRXbBtNEAgAqjbzimkf+K1r+Wd/nbot9nSGeKsvTa91aUFz7W/i N3+piRZPdbUGdR8UXIRze+Fg2ct8zzC0HLNz2IOHhVxwAw7i2A2bGlbnPcxoOMJamty8iHsU L8ziGFHkc8TeweU0UNVyRwfkZ1vSnuoo1Q3/6StIxnPtIBwIiRQuVx681B3AfjMF9uHBe55t gI7t8HRsnb8xrR01YvDBLU4Pr94YoxkULCOjASAiuh3V+TXBVVI5a10KcMjyXIFbevA0E0nE bYzmqyU9Gzpsmid/yLCdPiWiMUVj18spBNqUfWPs9DnzhMSsLs0z/j48rCkuFLH3Rf/K3o0w qNiVNQJKXDkxzwADBQgAoz/UaxqWtpKmk+gkfwiOx9zmpmdxM+T8zhkon43QUath3uA/QrQP IqEdbCB6ACxs0kCC1UzMlP0wFaxKf0toDBw1DjP71QlY4Q/MqnWV4bcpQWUKLpM1Ep3L1Elh Z3ojrAY1w1lUi4cXYJmpBNOHeiBgy2sgWDXEluiajIqhkBg0bpUU0hk77QIWjQTDkz91uRU9 KxawWObVLN24iu2W0hgamfkmxrHnll9DFgU/GCA4eh1RgHAA5+YakxsmNbFb2RhbuEUzUgFh GMVI/4GHNYNa91KducRrPawqofWpnwK6oBJMJt1+SNthIvCPhblQKfSy3yPLkdIujRtCmglt gMJhBBgRCAAJBQJXbBtNAhsMAAoJEClG3UA/P4iBZfIA/1byXnRQ3NVj8xdtN0GloddBS+D3 VdXhN7FPTjn7D05ZAQCP5q83GjGUkLDiucbbHI8w/CCXb3bHnGSf5GfDeiG66Q==

Hi all,
shouldn't GPG be disabled already because of the problems with deleting
keys as possible to demand with that new GDPR?
Kind Regards
Karl-Heinz

Am 06.01.20 um 16:09 schrieb Sascha Ternes:
> Hi Gero and all,
>
> Am 06.01.20 um 13:57 schrieb Gero Treuner:
>>> An alternative to fixing the problem would also be to disable GPG signing,
>>> temporarily or forever. This would be a "political" decision made by board
>>> or policy group, but they'll need some "technical opinions" to discuss
>>> about.
>>>
>>> As far as I am concerned, GPG signing is not very useful for me. And some
>>> chatter seems to imply that at least key servers and "large scale key
>>> signing" is being deprecated more and more. So are there any other
>>> opinions?
>> I know people who sign their keys with CAcert. Although the PGP WoT and
>> keyservers are not widely accepted, signing by CAs seems to be among
>> most useful applications left for PGP (maybe besides autocrypt, which is
>> a different story).
>>
>> So I propose to keep it.
> let us have a look into our issue tracker: We have at least three major
> issues and quite a bunch of minor issues in the GPG category that are
> not yet solved or reported as new.
>
> So I plead to disable it temporarily (remove the GPG menu from the
> website) until the bigger issues with GPG signing have been fixed. We
> should simultaneously communicate this in our news to show that we are
> concerned.
>


Attachment: smime.p7s
Description: S/MIME Cryptographic Signature




Archive powered by MHonArc 2.6.18.

Top of Page