#291 ✓wontfix

add warning when user switches away from hkps key server

Reported by steve | November 22nd, 2014 @ 08:08 PM

Users should be notified whenever they try to enter a non-hkps server, that their gpg "address book" might be leaked when searching for keys, updating them and on other key server related operations.

  1. GPG Keychain should only include the hkps sks key server cluster address hkps://hkps.pool.sks-keyservers.net in the default key servers list
  2. if the user enters a custom key server without hkps, display a warning about possible security implications
  3. store any working servers (hkp after warning and hkps) which are entered by the user in the key server list

When this is fixed in GPG Keychain, it should be ported to GPGPreferences.

Comments and changes to this ticket

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.

New-ticket Create new ticket

Create your profile

Help contribute to this project by taking a few moments to create your personal profile. Create your profile ยป

Shared Ticket Bins

People watching this ticket

Referenced by