Re: [Sks-devel] About deleting keys

[Kristian Fiskerstrand]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 10/29/2013 10:36 PM, dirk astrath wrote:
> Hello,
> 

Hi

> 
> The issue is the storage of personal data in worldwide databases 
> without the possibility to get them deleted. German law enables 
> everybody to get their data removed from databases. No matter if
> the data is in databases accessible via internet or in closed
> databases accessible for employees of a company.
> 


Not gonna comment too much on this, but a general note is a question
on what constitute "personal data", in my experience name and email
isn't included, but IANAL.

> 
> If there is no private key needed and no verification done
> everybody can generate keys with every combination of name and
> email-adress, generated at random dates and upload them to the
> keyservers. And if everybody is able to generate and publish fake
> keys everybody can build up fake web of trust.
> 


This is why you have key validation requirements and
signatures/certification. The existence of a key doesn't bind that key
to a specific individual, no matter what the UID says.

- -- 
- ----------------------------
Kristian Fiskerstrand
Blog: http://blog.sumptuouscapital.com
Twitter: @krifisk
- ----------------------------
Public PGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net
fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3
- ----------------------------
Nulla regula sine exceptione
No rule without exception
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.1.0-beta255 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=aRs4
-----END PGP SIGNATURE-----