email-adress strings in comments

Ans ans at immerda.ch
Fri Jan 7 17:09:05 CET 2011


Hi

I just found out that it's possible to create keys with email adresses
in the comment field, like this:

uid                  sdgsdg sgsg (<test at test.com>) <foo at bar.com>

which can trick the keylookup:

gpg --list-key "<test at test.com>"

lists this key, even tough this would be just a comment.

cheers,
Ans



More information about the Gnupg-devel mailing list