Updated OpenPGP Security (markdown)

Dominik Schürmann 2015-03-12 15:16:46 +01:00
parent be7ab089f5
commit 492e266450
1 changed files with 1 additions and 1 deletions

@ -3,7 +3,7 @@
* The default keyserver is hkps://hkps.pool.sks-keyservers.net using a pinned certificate (can be found in assets)
* When updating a key from a keyserver, the fingerprint of the downloaded key is checked to match the fingerprint of the existing key
## Current OpenPGP security choices in OpenKeychain
## OpenPGP Security Choices
* We never generate v3 signatures, always v4
* We do not import v3 keys (https://github.com/coruus/cooperpair/tree/master/keysteak)
* If a v4 key is imported with a long key id that already exists in the database, the import is canceled. (see https://github.com/coruus/cooperpair/tree/master/pgpv4 for test keys)