-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I just got here today via a pop-up in GPG Mail. It said you were the new 
custodians and an update was available. Taken together, that smells of Trojan. 
So I went looking for signatures and a bulging web of trust. No record on any 
of the usual places.

..and, I went ahead and did the GPG-mail version update by clicking on all the 
clicky things. I kept a record of the SHA-1 digest off your web page, but could 
I find the download to test the digest after install was complete?
That did not fill me with confidence.

.. OK, you call it GPG2, and I did manage to fix up my Emacs options, but why 
did you have to delete the old GPG on my machines?

OK I'm now happy enough with the provenance of the whole package and mailing 
list and all, but it was a scary introduction.

Elliott Roper
phone: +44 1663 747334
mobile +44 7796 171018
www.yrl.co.uk



-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org

iEYEARECAAYFAk1v8hAACgkQflyp5I5Z4ki1OwCg+qV5HhEPuew6n5fHaMnIZTbT
VeIAoOmbIzy56lVz3+4Ka5EpN4CmB2QH
=bfBp
-----END PGP SIGNATURE-----

_______________________________________________
gpgtools-users mailing list
[email protected]
FAQ: http://www.gpgtools.org/faq.html
Changes: http://lists.gpgtools.org/mailman/listinfo/gpgtools-users
Unsubscribe: 
http://lists.gpgtools.org/mailman/options/gpgtools-users/[email protected]?unsub=Unsubscribe&unsubconfirm=1

This email sent to: [email protected]

Reply via email to