sks-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Sks-devel] "quality" of keyservers offering hkps


From: Gabor Kiss
Subject: Re: [Sks-devel] "quality" of keyservers offering hkps
Date: Thu, 14 Aug 2014 14:25:46 +0200 (CEST)
User-agent: Alpine 2.02 (DEB 1266 2009-07-14)

> You can still block certain pakets from up/downloads (i.e. not
> providing signature pakets for some key -- kind of a DoS when checking a
> trust path)

We spoke about information leakage and manipulation so far.
DoS is a quite other topic.
SKS network is quite vulnerable from this point of view.
A script kiddie or a TLA could blow up all the servers with 100 million
dummy keys within in a day.

Gabor



reply via email to

[Prev in Thread] Current Thread [Next in Thread]