@jan once details are published, and #39c3 is over, well take another look. But note that #deltachat's usage of #openpgp is intentionally minimal. #Gpgfail is a lot about failures of signature verification, and parsing problems in the gpg c-implementation but #deltachat doesn't use these mechanisms or code at all. The @rpgp folks are still studying the details, and there might be issues, so maybe also follow them for more details. Again, this doesn't affect deltachat as things stand.

@sandro there is a long trail history how openpgp evolved. We didn't mean to fully educate about this 20+ years history, just highlight that modern #openpgp #rfc9580 and #rpgp is pretty fine. Nevertheless, rpgp authors will carefully look if anything in #gpgfail could be an issue. Details haven't been fully published yet.