You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Folks, We have encountered a case where merchants are using Java SDK for PGP encryption and it has SHA1 default signature and so is the InsecureAllowUnauthenticatedMessages kept as False.
while performing decryption we are receieving Err: Insecure signature , Security wise we are not allowed to keep this value to be set as default, but the buisness requirement need this support, If we are allowed to do it I would love to add the changes.
The text was updated successfully, but these errors were encountered:
Folks, We have encountered a case where merchants are using Java SDK for PGP encryption and it has SHA1 default signature and so is the
InsecureAllowUnauthenticatedMessages
kept as False.while performing decryption we are receieving
Err: Insecure signature
, Security wise we are not allowed to keep this value to be set as default, but the buisness requirement need this support, If we are allowed to do it I would love to add the changes.The text was updated successfully, but these errors were encountered: