4 ms·
Adobe Security team posted their private key
- taithethai 9y agoIt's since been revoked. https://pgp.mit.edu/pks/lookup?op=vindex&search=0x86C00FC2AF877616 https://pgp.mit.edu/pks/lookup?op=vindex&search=0x86C00FC2AF...
- tonyztan 9y agoLooks like they've removed the compromised key and posted a new public key: https://blogs.adobe.com/psirt/?page_id=1498 https://blogs.adobe.com/psirt/?page_id=1498
- excalibur 9y agoThat's a paddlin'.
- TwoNineA 9y agoToday I learned: Adobe has a security team.
- r3bl 9y agoEven though I was against "GPG is too complicated" thing, in the last 20 min I corrected a couple of people, so just to be clear: * This key was issued four days ago. * No, anybody with that key can't read their messages. You still need a password for the key. * The password for the key could be cracked (depends solely on how complicated the password is) with a copy of the key, but the key is already revoked. * You would still need a copy of the email to read it. If you're trying to impersonate them, you still have to impersonate the email from that email address as well. It is bad. It is a rookie mistake. It is not a catastrophic mistake though and there will probably be no consequences of it.