If you have sent any plaintext confidential emails to someone (most likely you did), have you ever questioned yourself about the mail being tampered with or read by anyone during transit? If not, you ...

How do you know someone is really who they say they are? In developer and security circles, you do it with Pretty Good Privacy (PGP) keys. Or, you used to anyway. If ...

Security researcher Marcus Brinkmann has discovered a security flaw in GnuPG which potentially allowed attackers to spoof the digital signatures of nearly any person with a public key, Ars Technica ...

The trust that PGP signatures generates can be deceptive, one researcher, a regular poster to the full-disclosure vulnerability mailing list, has discovered. Gadi Evron, an information security ...

There is some kind of deeper story here, if I recall last time I used gpg like this the man page said to use an option to put gpg messages into a dedicey FD so they are not intermingled with untrusted ...