Man-in-the-Middle (MitM)

openpgp is vulnerable to man-in-the-middle MitM attacks. The attacks exist because it does not verify the validity of primary and subkey packets before signature verification, defeating the purpose of signature verification and compromising the traffic between legit users...