@sandro there is a long trail history how openpgp evolved. We didn't mean to fully educate about this 20+ years history, just highlight that modern #openpgp #rfc9580 and #rpgp is pretty fine. Nevertheless, rpgp authors will carefully look if anything in #gpgfail could be an issue. Details haven't been fully published yet.
Search
Items tagged with: RFC9580
Relax 😎! GPG is not OpenPGP!
Yesterday, vulnerabilities were published gpg.fail but they don't affect #deltachat or other #chatmail clients because
A) We never used #gnupg for anything; we use the modern #rustlang #openpgp implementation @rpgp, security audited multiple times.
B) #openpgp is fine, as modernized in #RFC9580, which already warns against several #gpgfail issues (gpg didn't implement that spec)
Please spread the word that #gpg is not #openpgp ... Thanks! #39c3