Post #3529797
2026-06-17 08:51 UTC
@novarivera@mastodon.social @bjornsdottirs@evokegts.umbrellix.org No, but it is discouraged. There are situations where you need to (or want to) use a classic mail address for relaying, even if it doesn't offer good metadata protection. It depends on the threat model of the people involved whether it is risky.
Replies (1)
-
@novarivera@mastodon.social 2026-06-17 09:00
@delta@chaos.social @bjornsdottirs@evokegts.umbrellix.org what steps have you taken to mitigate the fact that OpenPGP accepts known weak encryption? I downloaded your Linux Client and it accepted an MD5 signed 3DES encrypted message.