Re: [Sks-devel] Proposal: Start verifying self-signatures

[Johan van Selst]

Arnold wrote:
> So Johan, do you mean "let's do nothing, as this single one proposal
> does not protect us from *all* evil"? Or do you mean "we have to
> implement the proposal and think about how we can mitigate other
> attack vectors to the SKS-network", like the one you mentioned?

I believe the SKS-network really needs some hardening. There are many
trivial attacks or 'vandalisms' which are currently possible that might
be mitigated.

We should think about how to improve control and long-term
maintainability of the public PGP databases.


Regards,
Johan

pgprS6L4B_vjG.pgp
Description: PGP signature