[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: GPG and 6.0.2i progress.



Bill Stewart wrote:

| Has anybody checked GPG against popular implentations of PGP?
| For instance, I'm using the 5.5.3QU2 Eudora plugin with the $5 RSA addon,
| and it does ugly things with Mutt 0.95 MIME-format messages, 
| and even uglier things with the few GPG keys I've tried.

As an aside...

Even the latest version of GPG is broken, and its behaviour patterns vary on
different platforms. I've tried it on Linux/Pentium, Linux/Sparc,
Solaris/Sparc and HP-UX/PA.RISC.2. 

The key generation process takes a really really long time. It segfaults
during public key decryption on Linux/Intel. Segfaults for most operations
on HP-UX (compiled with egcs and native cc). Symmetric decryption bombs on
Solaris (egcs and gcc 2.8.1).

As of now, I would say gpg is not really reliable. Lots more work needs to
be done before we can even think of replacing PGP with GPG.