sks-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Sks-devel] keyserver.pramberger.at terminating


From: Jeff Johnson
Subject: Re: [Sks-devel] keyserver.pramberger.at terminating
Date: Wed, 08 Sep 2010 18:13:53 -0400

On Sep 8, 2010, at 6:02 PM, Peter Pramberger wrote:

> 
> ...some random MPI's *with his/her/whatever name linked to them*...
> 

In case it wasn't clear from the nerdy details in the "anonymous 
self-revocation"

    http://tools.ietf.org/html/rfc4880

section 5.11 User ID Packet (Tag 13) (and some other obscure
places like where PhotoID's are stashed, and with certification
signatures that confirm that Tag 13 is associated with the
pubkey/subkey) are all that ties the user identification to the key materiel.

Rip out everything but the pubkey/subkey, salt with revocations,
and the pubkey/subkey becomes anonymous on the server with
no personal data attached, or that can be indexed/used for retrieval.

What I cannot say is what happens down the road if the convention
to anonymize pubkeys as above, which remain on keyservers, and will be 
distributed
into keyrings (w revocation attached), and will be used by not only
gnupg, but other implementations.

And there's also the precedent of adding the methods to anonymize
keys on pubkey servers that would have to be lived with. That too needs some
thought.

73 de Jeff



reply via email to

[Prev in Thread] Current Thread [Next in Thread]