> > This one's no kidding: When you use finsert -keyIndex with an SSK key,
the _private_ key is inserted into the index!
>
> Thanks for pointing this out. It's fixed now. I suggest we do a new
> release as soon as possible as people are starting to use the key index
> code to submit keys to sites and this is a very bad thing.

Glad to know it's been fixed.

Isn't 0.3.8.2 imminent? Put it in there.

btw it wasn't really me who discovered the bug - it was the anonymous Monty
Python fan who kept on nagging about why his mp3s weren't being added to
freegle... *g*

-Stefan

----- Original Message -----
From: "Brandon" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, April 23, 2001 9:47 PM
Subject: Re: [freenet-devl] Bug in -keyIndex exposes private key


>
>
> BTW, for those using the current release, you can still insert keys using
> KeyIndexClient. It's only a problem when using the -keyindex option for
> InsertClient as it was using the key you gave it on the command line
> rather than the key generated from that key.
>
>
>
> _______________________________________________
> Devl mailing list
> [EMAIL PROTECTED]
> http://lists.freenetproject.org/mailman/listinfo/devl


_______________________________________________
Devl mailing list
[EMAIL PROTECTED]
http://lists.freenetproject.org/mailman/listinfo/devl

Reply via email to