the safety of gnupg

[Bruno Wolff III]

On Wed, May 31, 2006 at 22:37:39 +0930,
  Tim <ignored_mailbox at yahoo.com.au> wrote:
> I've just been reading some rather silly things about gnupg except for
> one practical point:  Who has actually checked the source code for it to
> see whether it's trustworthy, etc?
> 
> And, of course, the next thing would be:  Who would they be that we
> could trust them, too?  After a bit of Googling around, I'm darned if I
> can find out, nor think of the right terms to search for.

gnupg is much less likely to have an intentional back door than anything you
get from a corporation.

> Naturally, this extends to other open-source programs.  Which ones do
> get vetted?

The openbsd guys do security audits of programs.