Security researches discovered a man in the middle attack that can be used to get people to unknowingly decrypt intercepted PGP messages and send them back to the interceptor. The flaw isn’t in the software, it’s a complex form of social engineering that relies on the person replying to the intercepted messages and not trimming their reply. So here we have it, yet another reason to be courteous and trim your replies.
PGP flaw
August 12, 2002
rc3.org is a personal tech blog founded back in 1998. This post is one of roughly 10,000 published since then.