3 ms·
Warnings are unfortunately worthless without enforcement, much less adequate presentation. GPG doesn't even bother to prominently warn the user when a key is ex
by woodruffw 3y ago
Warnings are unfortunately worthless without enforcement, much less adequate presentation. GPG doesn't even bother to prominently warn the user when a key is expired: they tuck the message below the "verification succeeded" message, which is the exact opposite of what they should be presenting.
- WesolyKubeczek 3y agoIf the key was valid back when the message had been signed, and the key wasn't revoked later, what's wrong with verification having succeeded?
- woodruffw 3y agoAs the original analysis notes: many of the keys weren't valid at message signing time.