On Sunday, May 18, 2025 5:12:33 AM CEST Daniel Kahn Gillmor wrote: > potentially any future versions of GnuPG that decide to limit exposure > to their message parser in a detached signature context.
Before this change in poppler, the GnuPG backend already required a functioning GnuPG suite setup. This work in poppler has been done in full cooperation with GnuPG upstream, it is in the GnuPG backend of poppler and these signatures is created in g10code's namespace in the pdf files. (g10c.pgp.signature.detached) The packets used here has, as written, been available since 1998 and given all of that, I don't expect GnuPG upstream to remove the support for it. /Sune -- I didn’t stop pretending when I became an adult, it’s just that when I was a kid I was pretending that I fit into the rules and structures of this world. And now that I’m an adult, I pretend that those rules and structures exist. - zefrank
