The gpg.fail aftermath: On responsible disclosure, GPG, and the state of security in 2026
The gpg.fail aftermath: On responsible disclosure, GPG, and the state of security in 2026
In 2025, I found and disclosed a bunch of vulnerabilities in GPG, the most used PGP implementation, and held a talk at 39c3 about it. **S...
If you ignore most of it, it’s actually fine.