In 1997 PGP was extended so that other keys could be added to the public key allowing more than one person to read the message it was protecting.
BBC: Bug threatens net privacy
It will prevent any additional decryption keys from being added to any field in the PGP certificate.
CNN: Technology - Security flaw discovered in Network Associates PGP software
He said initially PGP was ensuring that its main server filtered out the bogus keys and other servers around the world would be updated soon.
And the PGP bug arises from the mistake that PGP originally made in not ensuring that all the additional decryption keys in the data-recovery field have to be signed to prevent the tampering.
应用推荐
模块上移
模块下移
不移动