We are conducting a security review for the corporate use of Gpg4win.
Could you please provide any publicly available information regarding the following security controls?
- IDS/IP S
- Vulnerability manageme nt
- HSTS/ TLS
- Session secu rity
Best regards.
Hello @Yurie and welcome to the forum!
Judging from the examples you are listing, I think there is a misunderstanding of what GnuPG/GPG4Win is. It is a tool running on desktop and portable computers, not a web or server application.
You can find more information about it on the websites:
Thank you for the clarification. We may not have explained our intent clearly.
Our questions are not about the Gpg4win application itself, but rather about the security of the website and related online services used to distribute Gpg4win.
As part of our organization’s security review process, we are looking for information regarding website security measures such as HSTS, supported TLS versions, WAF implementation, and similar controls.
Any information or references you could provide would be greatly appreciated.
Best regards.