C|Net is reporting on a bug in open-source GnuPG cryptography technology that could potentially allow people to tamper with digitally signed messages.
The problem lies in how certain e-mail applications display messages signed using the GNU Privacy Guard, also known as GnuPG and GPG, the GnuPG group said in a security alert Tuesday. It may not be possible to identify which part of a message is actually signed if GPG is not used correctly, it said.
http://news.com.com/Bug+may+expose+encrypted+e-mail/2100-1002_3-6165277.html?tag=nefd.top
The problem lies in how certain e-mail applications display messages signed using the GNU Privacy Guard, also known as GnuPG and GPG, the GnuPG group said in a security alert Tuesday. It may not be possible to identify which part of a message is actually signed if GPG is not used correctly, it said.
http://news.com.com/Bug+may+expose+encrypted+e-mail/2100-1002_3-6165277.html?tag=nefd.top
