Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

This seems like a pretty dumb reason.

If they can set the PGP key they can also change the email. If the account recovery team allows access to recently removed emails as part of the recovery process then it should also allow contacting those addresses without a recently added PGP key.

Logically adding a PGP key is equivalent to changing the email, the previous person can't access the messages anymore. If the recovery process handles these cases differently it is a flaw in the process.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: