PROJET AUTOBLOG


Shaarli - Les discussions de Shaarli

Archivé

Site original : Shaarli - Les discussions de Shaarli du 23/07/2013

⇐ retour index

Evil 32: Check Your GPG Fingerprints

dimanche 30 novembre 2014 à 09:48
CAFAI Liens en Vrac 30/11/2014
Check your fingerprints
Key servers do not use transport encryption (e.g. SSL) and GPG does not verify keys received when using --recv-keys leaving communicaiton with key servers vulnerable to MITM (man in the middle) or DNS attacks. GPG assumes you have manually checked your keys with --fingerprint.
(Permalink)