2 ms·
>When I've found security vulnerabilities in somebody's code, I can't think of a time I ever thought about GPG-signing my notice to them. It's not authenticity
by 0xDEAFBEAD 3y ago
>When I've found security vulnerabilities in somebody's code, I can't think of a time I ever thought about GPG-signing my notice to them.
It's not authenticity that matters here, it's confidentiality.
- tptacek 3y agoBasically nobody cares. Vulnerability researchers don't use GPG either.
- deleted 3y ago[deleted]