On Tue, 31 May 2005 10:52:03 +0200 (CEST), Konrad Rosenbaum said:
However, these signatures are not worth anything, since they leak the key
and are easily forgable after the first signature. So bothering with
That is not correct. They leak the key only when used with broken
software or when the key has been created with such software. Certain
versions of GnuPG (1.0.2 - 1.3.3) were broken and thus one should
better assume that the key has been broken. See
http://lists.gnupg.org/pipermail/gnupg-announce/2003q4/000160.html for
details.
Salam-Shalom,
Werner