Poison certs imperils GnuPG checking of Linux software

By Juha Saarinen on Jul 1, 2019 11:31AM

"Devastating attack" likely to get worse.

An attack has been unleashed against the global synchronising keyserver (SKS) network used by the popular OpenPGP encryption standard, with developers saying there is currently no mitigations available and that the problem is likely to get worse. By adding large amounts of undeletable signatures ...

Hi! You've reached one of our premium articles. This is available exclusively to subscribers.

It's free to register, and only takes a few minutes.

Once you sign up you'll have unlimited access to the full catalogue of Australia's best business IT content, as well as a daily news bulletin delivered straight to your inbox.

Already have an account? Log in to read this article.

Got a news tip for our journalists? Share it with us anonymously here.