An OpenPGP.js flaw just broke public key cryptography

Researchers found a bug that allowed malicious actors to spoof messages. Users are advised to patch up.