5 ms·
I'm not really sure what attack you are envisioning here. If they have access to your e-mail client, they should be able to just lift your account credentials,
by x1798DE 12y ago
I'm not really sure what attack you are envisioning here. If they have access to your e-mail client, they should be able to just lift your account credentials, allowing them to add a new PGP key to the key ring, then issue all the password resets and, if you want, change the PGP key back.
- mike-cardwell 12y agoNot sure why you think "knows username and password to access email" has to mean "has permission to change the PGP key assigned to the account"