Re: [Sks-devel] nokeyserver annotation

[Kristian Fiskerstrand]

On 12/20/2016 07:18 PM, Vincent Breitmoser wrote:
>> - to do this keyservers will have to actually do cryptography
> Are you sure? I don't think there's any attack scenario here: If any
> such signature exists, you can't upload the key. It's impossible to
> attach those to another person's key, and that's the only attack
> scenario I can see.
> 

Without verifying the signature this opens up for a DoS on users
expecting to distribute the keys, e.g in case of a revocation certificate.

-- 
----------------------------
Kristian Fiskerstrand
Blog: https://blog.sumptuouscapital.com
Twitter: @krifisk
----------------------------
Public OpenPGP keyblock at hkp://pool.sks-keyservers.net
fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3
----------------------------
Divide et impera
Divide and govern

signature.asc
Description: OpenPGP digital signature