Thanks heaps for the scope summary. I really do wish papers with such 'scary' titles would clearly indicate how regular users of the software are affected curre

Thanks heaps for the scope summary. I really do wish papers with such 'scary' titles would clearly indicate how regular users of the software are affected currently and how the security guarantees have been violated for them in the past and under what circumstances. Ideally they'd also say exactly what to do to remedy the problem, at least from the perspective of a user of say libgcrypt/GPG. Doing that would prevent a large amount of needless panic and scrambling.