Re: [Sks-devel] nokeyserver annotation

[Kristian Fiskerstrand]

On 12/20/2016 07:58 PM, Vincent Breitmoser wrote:
>> If you can trick a user into importing a package that hinders
>> distribution of the keyblock
> 
> This should be prevented by client implementations, why would they ever
> import a non-verifying self-cert?

An invalid notation might not be rejected by a client (is it critical
marked?). Is there a reference for this behavior in RFC and tested on
various implementations?

-- 
----------------------------
Kristian Fiskerstrand
Blog: https://blog.sumptuouscapital.com
Twitter: @krifisk
----------------------------
Public OpenPGP keyblock at hkp://pool.sks-keyservers.net
fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3
----------------------------
Divide et impera
Divide and govern

signature.asc
Description: OpenPGP digital signature