News for hackers. Stuff that matters.

A comment on Decades-old GnuPG bug allowed hackers to spoof just about anyone’s signature. Parent comment

Re:Decades-old GnuPG bug allowed hackers to spoof just about... by JasonFruit on Friday June 15, 2018 @01:51PM (#17321908)
I'm not certain, but doesn't GPGME do something a bit more sophisticated than that?
[ Parent | on HN ]
Re:Decades-old GnuPG bug allowed hackers to spoof just about... by jwilk on Friday June 15, 2018 @02:13PM (#17322098)
Nope, GPGME spawns the gpg binary too.

The major advantage of GPGME is that it's written by the same folks as GnuPG itself, and hopefully they know how to use the binary correctly.

[ Parent | on HN ]
Re:Decades-old GnuPG bug allowed hackers to spoof just about... by vertex-four on Friday June 15, 2018 @02:06PM (#17322046)
Unfortunately not, as far as a quick read of engine-gpg.c seems to suggest.
[ Parent | on HN ]