Too easy to accidentally revoke a key

jakob's Avatar

jakob

20 Oct, 2013 08:09 AM

Which of our tools is giving you problems?

GPG Keychain Access

What’s the version of that tool?

1.1.2 (507)

What version of OS X are you using? ( 10.8.5

Please describe your problem. Add as much detail as possible.

I created a new keypair, tested it a bit, and then created a revokation certificate to be stored safely. I wanted to look at it in a text editor, but accidentally double-clicked the file. Immediately, my key was revoked without any confirmation dialogue. I guess it is OK that .asc files are associated with GPG Keychain Access, but a confirmation dialogue should appear before doing something this drastic.

Please describe what you did expect instead

"Are you really sure you want to revoke the key ID 1234567 ([email blocked]) [Cancel] [OK]"

  1. Support Staff 1 Posted by Steve on 26 Oct, 2013 09:53 PM

    Steve's Avatar

    Hi Jakob,

    thanks for your input. We absolutely agree.

    We've a ticket for this problem:

    https://gpgtools.lighthouseapp.com/projects/65684/tickets/165-add-a...

    If this discussion get's closed, it will be re-opened as soon as the ticket is closed so you'll receive a notification. Feel free to open a new discussions should you run into further problems or need assistance.

  2. Steve closed this discussion on 06 Nov, 2013 05:34 PM.

  3. Support Staff 2 Posted by Steve on 07 Feb, 2014 05:01 PM

    Steve's Avatar

    Fixed in latest nightly. When now importing a revocation certificate, the user will see a message informing about the consequences and will have to confirm the import first before any damage can be done.

  4. Steve closed this discussion on 07 Feb, 2014 05:01 PM.

Comments are currently closed for this discussion. You can start a new one.

Keyboard shortcuts

Generic

? Show this help
ESC Blurs the current field

Comment Form

r Focus the comment reply box
^ + ↩ Submit the comment

You can use Command ⌘ instead of Control ^ on Mac