99% of PGP-encrypted security reports to security@golang.org are bogus

Some sanity comedy for the bored: "99% of the PGP-encrypted emails we get to security@golang.org are bogus security reports. Whereas "cleartext" security reports are only about 5-10% bogus. Getting a PGP-encrypted email to security@golang.org has basically become a reliable signal that the report is going to be bogus, so I stopped caring about spending the 5 minutes decrypting the damn thing (logging in to the key server to get the key, remembering how to use gpg)." — Brad Fitzpatrick Quote: https://news.ycombinator.com/item?id=14123388 courtesy this week's LWN briefs https://lwn.net/Articles/721184/