Two high-profile PGP project contributors have faced attacks conducted by unknown threat actors which have been able to poison certificates used by the SKS keyserver network. PGP is a form of ...

OpenPGP installations can grind to a halt and fail to verify the authenticity of downloaded packages as the keyserver network has been flooded with bogus extra signatures attesting ownership of a ...

Join our daily and weekly newsletters for the latest updates and exclusive content on industry-leading AI coverage. Learn More Starting today, Facebook users can list their OpenPGP keys on their ...

Researchers from German security firm Recurity Labs have released a JavaScript implementation of the OpenPGP specification that allows users to encrypt and decrypt webmail messages. Called ...

A newly discovered flaw in OpenPGP.js, a JavaScript cryptography library used by services like Proton Mail, could allow attackers to spoof messages that appear securely signed and encrypted, security ...

Mozilla announced plans this week to add native support for the OpenPGP email encryption standard inside Thunderbird, the organization's open-source email client. Support is expected to land in the ...

How to add an OpenPGP repository key, now that apt-key is deprecated Your email has been sent For years, I’ve added repository keys to Ubuntu-based Linux distributions with the apt-key command. But ...

There is a way to verify fake messages as if they were legitimate The bug affects multiple versions of OpenPGP.js A patch is available A security flaw in the JavaScript implementation of OpenPGP.js ...