From 227f099aa78e47c2e1fe242498dbc326863180f4 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Dominik=20Sch=C3=BCrmann?= Date: Mon, 3 Aug 2015 00:51:34 +0200 Subject: [PATCH] Updated OpenPGP Security (markdown) --- OpenPGP-Security.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/OpenPGP-Security.md b/OpenPGP-Security.md index 254e813..ef943fc 100644 --- a/OpenPGP-Security.md +++ b/OpenPGP-Security.md @@ -3,7 +3,7 @@ * We do not import v3 keys (https://github.com/coruus/cooperpair/tree/master/keysteak) * If a v4 key is imported with a long key id that already exists in the database, the import is canceled. (see https://github.com/coruus/cooperpair/tree/master/pgpv4 for test keys) * Whitelist of ciphers, whitelist of hash algorithms, minimum key requirements, and cipher/hash/key defaults can be found in [PgpConstants](https://github.com/open-keychain/open-keychain/blob/master/OpenKeychain/src/main/java/org/sufficientlysecure/keychain/pgp/PgpConstants.java). -* We explicitly don't honor the preferred algorithms indicated by imported public keys to prevent fallback attacks (see coruus comments). +* We explicitly don't honor the preferred algorithms indicated by imported public keys to prevent downgrade attacks (see coruus comments). ## Keyserver Security * All pre-configured keyservers use HKPS