diff --git a/OpenPGP-Security.md b/OpenPGP-Security.md index 254e813..ef943fc 100644 --- a/OpenPGP-Security.md +++ b/OpenPGP-Security.md @@ -3,7 +3,7 @@ * We do not import v3 keys (https://github.com/coruus/cooperpair/tree/master/keysteak) * If a v4 key is imported with a long key id that already exists in the database, the import is canceled. (see https://github.com/coruus/cooperpair/tree/master/pgpv4 for test keys) * Whitelist of ciphers, whitelist of hash algorithms, minimum key requirements, and cipher/hash/key defaults can be found in [PgpConstants](https://github.com/open-keychain/open-keychain/blob/master/OpenKeychain/src/main/java/org/sufficientlysecure/keychain/pgp/PgpConstants.java). -* We explicitly don't honor the preferred algorithms indicated by imported public keys to prevent fallback attacks (see coruus comments). +* We explicitly don't honor the preferred algorithms indicated by imported public keys to prevent downgrade attacks (see coruus comments). ## Keyserver Security * All pre-configured keyservers use HKPS