4 ms·
Keyoxide doesn't use any cryptography, everything is handled by identities in PGP. I doubt it needs any auditing. The only reasonable attack vector I can see i
by karmanyaahm 5y ago
Keyoxide doesn't use any cryptography, everything is handled by identities in PGP. I doubt it needs any auditing.
The only reasonable attack vector I can see is hijacking the website (or proxy server) to return different keys or show something is verified when it's actually not.
- gnufx 5y agoI haven't checked quite what Keyoxide is doing, but I'm not sure cryptography is the only thing worth auditing for security.