This is the tweet to link to, to end this silly debate.https://twitter.com/tqbf/status/996056901514420224 …
This is like saying an attack on a popular web client that still enables SSLv3 by default is SSL/TLS's fault. I mean, sure, but when the problem has been known for years and updates deployed to fix it...
-
-
That doesn’t seem to be the case here at all.
-
GPG supports MDCs and returns an error when they're suspiciously missing or wrong. We've already gone over the reasons why it can't fail early without returning any plaintext. It's not perfect, but most of the problem here is MUAs, not PGP.
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.