SigSpoof: Spoofing signatures in GnuPG, Enigmail, GPGTools and python-gnupg

Re:SigSpoof: Spoofing signatures in GnuPG, Enigmail, GPGTool... by etu on Friday June 15, 2018 @01:42AM (#17317743)

I think it's worth mentioning that this is posted on NeoPG's site, which is a fork of GnuPG which seems to do really good work. I'm glad to see this happening since I'm using these tools and fixes are on the way :)

[ Parent | on HN ]

Re:SigSpoof: Spoofing signatures in GnuPG, Enigmail, GPGTool... by lathiat on Friday June 15, 2018 @02:14AM (#17317839)

Specifically seems to be a fork providing a more concrete API, rather than GPG which has a CLI most people wrap.

Lots of bugs caused by that sort of thing, unfortunately it's all we have for GPG.

EDIT: It appears I was mistaken, the "GPGME" project also exists. I am not sure if that has some serious deficiencies that mean it's not used more often never the less, it's not the only option.

[ Parent | on HN ]

Re:SigSpoof: Spoofing signatures in GnuPG, Enigmail, GPGTool... by Boulth on Friday June 15, 2018 @02:25AM (#17317867)

There is also GPGME.

[ Parent | on HN ]