Access to www.gnupg.org only via TLS

Doug Barton dougb at dougbarton.us
Wed Apr 30 22:32:27 CEST 2014


On 04/30/2014 01:26 PM, David Shaw wrote:
> There were questions early on whether grabbing secret keys was possible via Heartbleed or not.  Since then, it's been proven that it is definitely possible.

Thanks for that update, I stand corrected.

Meanwhile it doesn't change my opinion about StartSSL. If some person or 
group chooses not to use them I respect their right to make that choice. 
But personally I still think they are doing a great service for the 
community and have no problem with them charging a modest fee for 
revocations.

Doug




More information about the Gnupg-users mailing list