[prev in list] [next in list] [prev in thread] [next in thread] 

List:       gnupg-devel
Subject:    sending in band public key
From:       Tim Prepscius <timprepscius () gmail ! com>
Date:       2013-08-01 21:14:34
Message-ID: CAAJ3AvUzSB5dKz8aiMAfa62DQu0VJyRfTsOGvCZG_2rt+saAsw () mail ! gmail ! com
[Download RAW message or body]

> Sending the public key is not common with OpenPGP - You send it out of
> band.  Only S/MIME resorts to this kludged due to the non-standardized
> way of looking up keys (Oh well, unless you use the global X.500
> directory ;-)


If I were to send a public key in-band.

Is the security concern that the mail could be intercepted in route
and the key be replaced by a different key?  MITM.

Or are there other security concerns as well?

-tim

_______________________________________________
Gnupg-devel mailing list
Gnupg-devel@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-devel
[prev in list] [next in list] [prev in thread] [next in thread]