[Bug 2081756] Re: Annoying pop-ups from gpgsm

[Marc Deslauriers]

** Information type changed from Private Security to Public Security

** Changed in: gnupg2 (Ubuntu)
       Status: New => Confirmed

** Changed in: gnupg2 (Ubuntu)
   Importance: Undecided => Wishlist

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to gnupg2 in Ubuntu.
https://bugs.launchpad.net/bugs/2081756

Title:
  Annoying pop-ups from gpgsm

Status in gnupg2 package in Ubuntu:
  Confirmed

Bug description:
  I keep getting pop-ups from gpgsm asking if I "ultimately trust" some
  CA. At first I thought that only one CA as being checked by gpgsm, but
  after I allowed one, I found it was a different from the previous I
  had denied.

  Since the Stoopid(tm) pop-up blocks the entire screen, I could not
  take a screenshot. I'm attaching photos, more when I get more pop-ups
  with other CAs.

  Of course I could just allow those CAs, but since I have no idea what
  triggered the pop-ups, I'd rather not. The first one was from
  T-Systems, I looked that up and it *seems* legit. The second one is
  from T-TeleSec in Belgium. I have no way to verify that CA.

  I assume that many other people see this, but they may just allow the CAs without knowing if they are legit.
  So for me this is a security problem as long a I don't know where the CAs are coming from and why gpgsm is asking.

  ProblemType: Bug
  DistroRelease: Ubuntu 24.04
  Package: gpgsm 2.4.4-2ubuntu17
  ProcVersionSignature: Ubuntu 6.8.0-45.45-generic 6.8.12
  Uname: Linux 6.8.0-45-generic x86_64
  ApportVersion: 2.28.1-0ubuntu3.1
  Architecture: amd64
  CasperMD5CheckResult: unknown
  CurrentDesktop: KDE
  Date: Mon Sep 23 18:34:53 2024
  InstallationDate: Installed on 2014-12-22 (3563 days ago)
  InstallationMedia: Kubuntu 14.10 "Utopic Unicorn" - Release amd64 (20141022.1)
  SourcePackage: gnupg2
  UpgradeStatus: Upgraded to noble on 2024-06-21 (94 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnupg2/+bug/2081756/+subscriptions