Skip to forum content
FireGPG Forum
Forum for the FireGPG's extention. (!Don't post too links or wait we unban your, akismet is very aggressive)
You are not logged in. Please login or register.
Active topics Unanswered topics
Search options
FireGPG Forum » Posts by aac49l
Must I really explain the implications of this?
Downloading the FireGPG update via insecure HTTP allows the potential for malware to be injected into the update. Now we have malware in our system with access to our public/private keyring, possibly monitoring when we enter our secret-key passcode and uploading this information to some server in China. Fantastic!
That's one scenario. So, please, make the update use HTTPS.
Posts found [ 1 ]
FireGPG Forum » Posts by aac49l
Powered by PunBB, supported by Informer Technologies, Inc.
Currently installed 2 official extensions. Copyright © 2003–2009 PunBB.