SigSpoof flaw fixed inGnuPG, Enigmail, GPGTools, and python-gnupg.
For their entire existence, some of the world's most widely used email encryption tools have been vulnerable to hacks that allowed attackers to spoof the digital signature of just about any person with a public key,...