To sign or not to sign: Practical vulnerabilities in GPG and friends [video]
media.ccc.de
media.ccc.de
but I think the presentation is somehow a better summary
edit: somehow all the previous links were not showing up for me, now they are. Can close this as a dupe.