Kevin Falcone on Mon, 28 Aug 2000 23:41:07 -0400 (EDT)


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

[PLUG] Re: PGP ADK Vulnerability.


>>>>> "BJ" == Bill Jonas <bj@netaxs.com> writes:

  BJ> it was stated that GnuPG doesn't have this vulnerability.  The
  BJ> reason given was that it follows the OpenPGP spec, which doesn't
  BJ> have a requirement for ADK capability.

well, considering that the gnupg author just added the ability to have
ADKs listed in the output of the --list-* functions to CVS, I would
think that it isn't vulnerable.  Ah, yes, here it is:

<http://lists.gnupg.org/gnupg-users-200008/msg00266.html>

<flamebait deleted>

-kevin

-- 
See, these two penguins walked into a bar, which was really stupid, 'cause
the second one should have seen it. 


______________________________________________________________________
Philadelphia Linux Users Group       -      http://www.phillylinux.org
Announcements-http://lists.phillylinux.org/mail/listinfo/plug-announce
General Discussion  -  http://lists.phillylinux.org/mail/listinfo/plug