Integrate a sanity check to avoid uploading private keys

openpgpjs / hkp-client

Client for the OpenPGP HTTP Keyserver Protocol (HKP) to lookup and upload keys

GNU Lesser General Public License v3.0

7 stars 3 forks source link

Open AlexanderWillner opened 10 years ago

AlexanderWillner commented 10 years ago

Not sure how the library can be misconfigured to upload private keys, but it should not be possible. See https://twitter.com/g33kspeed/status/491692404278194176

unknown

tanx commented 10 years ago

If I understand correctly, openpgpjs doesn't even implement hkp. How is this an OpenPGP.js issue?

AlexanderWillner commented 10 years ago

Oh, right. Thanks. Thought hkp has been integrated in and been used from within opgjs...