2 ms·

Nice to see that even security researchers can't be bothered to PGP encrypt their messages then.

• toyg 10y ago
  Why should they? Signing, maybe; encrypting, superfluous and risky in this context (if the other party won't accept or read encrypted mail).
  • joosters 10y ago
    Perhaps because they are discussing critical system vulnerabilities, some of which would be disastrous if they got into the 'wrong' hands before they were patched? And, from Symantec's own page: Symantec strongly recommends using encrypted email for reporting vulnerability information