News for hackers. Stuff that matters.
Re:Ditching OpenPGP, a new approach to signing APT repositories by nullc on Wednesday June 23, 2021 @04:57PM (#27610250)
> Well. There are two proposals. If we go with the subkey proposal, we'd not implement the simple protocol, solving that issue.

Avoiding that concrete exploit.

The lack of domain separation design flaw remains. :)

As typical for design flaws it may not be meaningfully exploitable at any given time. Doesn't mean it isn't a design flaw.

There are no comments on this comment yet.