LKML: <1471274895@i2pmail ...: Fake Linus Torvalds' Key Found in the Wild, No More Short-IDs.

Fake Linus Torvalds' Key Found in the Wild, No More Short-IDs. It was well-known that PGP is vulnerable to short-ID collisions, and many experiments were done to demonstrate that. [0] Nevertheless, real attacks started in June, some developers found their fake keys with same name, email, and even "same" fake signatures by more fake keys in the wild, on the keyservers. [1] All these keys have same