Timeline for Shouldn't GPG key fetching use a secure connection?
Current License: CC BY-SA 3.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Oct 7, 2021 at 6:47 | history | edited | CommunityBot |
replaced http://tools.ietf.org/html/rfc with https://www.rfc-editor.org/rfc/rfc
|
|
| Sep 4, 2013 at 23:20 | comment | added | Terrel Shumway | Using TLS still requires you to trust the keyserver (e.g. to protect the private key of it's X.509 cert). But this more reasonable than blindly trusting the path between you and the keyserver. Mostly this is a problem of who is watching and why they may be interested in your social graph. (It's only "metadata".) TLS can help mitigate this exposure. | |
| Jun 2, 2011 at 20:24 | vote | accept | LanceBaynes | ||
| Jun 2, 2011 at 20:24 | |||||
| May 28, 2011 at 21:50 | history | answered | Thomas Pornin | CC BY-SA 3.0 |