Email PQC support stays under half of measured Tranco domains
Google accounts for about 87% of hybrid-capable relays, and some senders fall back to plaintext SMTP.
Stories per day · 30 days
5 stories, newest first · one card per story
Stories tagged #openpgp
Re: Retrospective by 'gpg.fail' authors
GnuPG maintainer Werner Koch responds on oss-security to the gpg.fail authors' retrospective, addressing format-nonliteral handling in time string formatting.
Re: Retrospective by 'gpg.fail' authors
oss-security thread on the gpg.fail retrospective discusses legacy code removal and flaws surfaced by frontier AI models in open-source projects.
Re: Retrospective by 'gpg.fail' authors
Peter Gutmann replies to gpg.fail retrospective, pointing to PGP's arbitrary packet format as root of many past vulnerabilities.
Mozilla Revokes Firefox and Thunderbird Linux Signing Key After Key Lands in Private Repo
Mozilla revoked the Firefox and Thunderbird Linux RPM signing subkey after an unencrypted copy landed in a private repo; no unauthorized access found.