Re: [Sks-devel] heads-up: another attack tool, using SKS as FS

[Hendrik Visage]

On 14 Jul 2018, at 13:04 , Gabor Kiss <address@hidden> wrote:

Then let's drop keys that don't contain a valid email address in the key id.

How do you propose to validate the email address?

(Hint: this is a surprisingly hard problem.)

See also "web of trust" and "strong set".
Addresses should/can be checked by humans worldwide who sign/certify the key.

I’ve been trying to get mine “signed” by Web-Of-Trust for years now… also not that “easy” ;(

---
Hendrik Visage

HeViS.Co Systems Pty Ltd
T/A Envisage Systems / Envisage Cloud Solutions
+27-84-612-5345 or +27-21-945-1192
address@hidden

signature.asc
Description: Message signed with OpenPGP