[Tickets #5773] Re: cache PGP public key

bugs at bugs.horde.org bugs at bugs.horde.org
Fri Oct 5 18:41:22 UTC 2007


DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/?id=5773
-----------------------------------------------------------------------
 Ticket             | 5773
 Updated By         | adrieder at sbox.tugraz.at
 Summary            | cache PGP public key
 Queue              | IMP
 Version            | HEAD
 Type               | Enhancement
 State              | Rejected
 Priority           | 1. Low
 Owners             | 
-----------------------------------------------------------------------


adrieder at sbox.tugraz.at (2007-10-05 11:41) wrote:

> This would render key revocations useless and has to be considered a 
> security risk.

hmm... and how are revocations handled if the the public key is stored in
the readers address book? As far as I see in that case the risk is the
same, and this code part should also be removed.
However, I think an option would be to set the cache expiration time for
the public key item to a shorter time, eg. 1 hour.
Please rethink your decision....





More information about the bugs mailing list