Re: [Sks-devel] "quality" of keyservers offering hkps

[Christoph Egger]

"Kiss Gabor (Bitman)" <address@hidden> writes:
>> - mitm attacks  may manipulate up-/downloaded keys
>
> no
>
> Every uploaded key can be manipulated legally by anyone.
> (I.e. you attach a new signature to your friend's key
> and you send back to the key servers.)
> Moreover anybody can send a totally new key in the name of you.
> Public key server is like Wikipedia or a piece of paper.
> And everybody has a pencil. :-)

You can still block certain pakets from up/downloads (i.e. not
providing signature pakets for some key -- kind of a DoS when checking a
trust path)

  Christoph

-- 
9FED 5C6C E206 B70A 5857  70CA 9655 22B9 D49A E731
Debian Developer | Lisp Hacker | CaCert Assurer

pgp_ggEz1E5mS.pgp
Description: PGP signature