[Gpg4win-users-en] Untrused Site Certification

[Werner Koch]

On Thu, 30 Jul 2015 10:33, bernhard at intevation.de said:

> I hope we'll get around doing something in September or October.

Bernard, it is not more than an hour to add TLS support to the
webserver.  Pretty please do that now and also enable Strict Transport
Security.

Although it is relative easy to mount an MiTM on TLS, having the data
encrypted is simply better even it is just to raise the costs for mass
surveillance and to protect against casual snooping.

Frankly, I do not understand your resistance to that.  GnuPG also allows
for CMS/X.509 encryption (gpgsm) which has the very same problems as TLS.
And I have seen more than one S/MIME encrypted mail from you. 

Or should I really hack it by configuring my pound instance to forward
all gpg4win traffic to 5.9.98.186 and change the gpg4win.org A record
accordingly (I am the hostmaster for that domain)?


Salam-Shalom,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.