Re: [Sks-devel] Dump

[Robert J. Hansen]

> The issue is one off vs. wholesale, and the initial inquiry from the .edu 
> poster demonstrates that it is not generally known how to get all 2.9 million 
> without effort beyond that of a casual attacker

The initial inquiry from the .edu poster demonstrates only that the original 
poster didn't know.  Generalizing from a single data point is not wise.

> Facilitating anonymous wholesale transfers increases the size of the 
> population able to readily have a corpus to spam at, with a set of assumedly 
> valid email addresses and matching ID information

(a) they already have it, and

(b) people who upload their certificates to servers willingly accept the risk 
of their email address being public in exchange for the benefit of having their 
certificates being easily findable -- and who are you to say their wishes 
should be ignored?