Post
Topic
Board Meta
Re: Should PGP keys be made mandatory for high ranks?
by
Carlton Banks
on 02/03/2019, 14:53:12 UTC
this was already suggested by OgNasty to theymos, and theymos thinks PGP keys are insecure and it needs a revision.

I’ve long thought there should be a spot for PGP fingerprint.

PGP fingerprints are SHA-1, which is insecure. The OpenPGP standard really needs a complete new revision...

hmmm, that means spoofing fingerprints is fairly trivial. Awkward.