Gpg 1.4 Renato

[Jacob Bachmeyer]

On 1/18/26 19:07, Robert J. Hansen via Gnupg-users wrote:
>> What prevents simply running GPG 2.x on an Eee PC or other recycled 
>> low- spec hardware?
>
> IIRC, he's supporting a WinXP user whose workflow has pieces that only 
> work with GnuPG 1.4. I'm speculating that something like 
> [GPGtray/WinPT] might be in use.

If that is the case, said user needs to migrate operating systems post 
haste.

Windows has *never* really been secure; even an air-gapped Windows box 
is questionable without extensive procedures to validate/sanitize the 
data in/out.  (Remember Stuxnet, anyone?  It actually targeted XP, if I 
recall correctly.)

A user able to manage the precautions needed to make (even an 
air-gapped) Windows box vaguely secure is certainly able to dispense 
with that complexity and use GNU/Linux.

There is a subset of GPG 1.4 functionality (RSA-4096, for one example) 
that is still secure today, but GPG 2.x also has that functionality.  
There is no good reason to use GPG 1.4 for current traffic.


-- Jacob