Bug#559458: kgpg: default selection is considered weak.

[david b]

Package: kgpg
Severity: normal

As sha1 will be used by default to sign messages when a key is created, kgpg is 
continuing to use what is now considered a weak/not as strong method of 
signing. A key should use perhaps SHA2 to sign messages (by default).

-- System Information:
Debian Release: 5.0.3
  APT prefers stable
  APT policy: (900, 'stable'), (600, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.31.6 (SMP w/4 CPU cores)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash



-- 
To UNSUBSCRIBE, email to debian-qt-kde-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#559458: kgpg: default selection is considered weak

[Eckhart Wörner]

reassign 559458 gnupg
thanks

Hi,

> As sha1 will be used by default to sign messages when a key is created,
> kgpg is continuing to use what is now considered a weak/not as strong
> method of signing. A key should use perhaps SHA2 to sign messages (by
> default).

kgpg doesn't set its own default but just uses whatever gpg serves, therefore 
reassigning to gnupg.

Eckhart



-- 
To UNSUBSCRIBE, email to debian-qt-kde-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/201003172323.54970.ewoer...@kde.org