This is the problem with just writing things without the proper information. There is <b>nothing wrong</b> with the encryption, the problem is in very bad mail clients which ignore the "Yo, this message is not authorized through an MDC" message. The EFF statement is entirely misleading, there is no flaw in GPG, as has been pointed out if you would actually look at the situation for more than 3 seconds. The entire paper is an incorrectly hyped disaster. The fact that so many people are now incorrectly informed is very annoying.