Re: Fake GPG key attack on a Freenet developer

[email protected] Sat, 24 Sep 2016 09:47:15 +0200

Newsgroups	gmane.network.freenet.devel
Organization	Freenet Project
Message-ID	<1500035.JOPVEGx6u2@1337h4x0r>

On Saturday, September 24, 2016 04:45:20 AM [email protected] wrote:
> As consequences, I would request the following:
> [...]

(And the obvious of course:

- Always validate keys by the full fingerprint, not just from the short 8 
character hashcode.

- Validate fingerprints using a secure channel / reallife communication / the 
GPG Web of Trust.)

_______________________________________________
Devl mailing list
[email protected]
https://emu.freenetproject.org/cgi-bin/mailman/listinfo/devl

signature.asc (application/pgp-signature, 836 B)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
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=6lkq
-----END PGP SIGNATURE-----