Re: New keyserver at keys.openpgp.org - what's your take?

2019-06-14 Thread Konstantin Ryabitsev
On Fri, Jun 14, 2019 at 05:25:05PM +0300, Teemu Likonen wrote: The current shortcoming is stripping third-party signatures. So Web of Trust wouldn't work (for good reasons described in the FAQ [0]). For some people this may be surprising. It may turn out to be a good choice to leave other

Re: New keyserver at keys.openpgp.org - what's your take?

2019-06-14 Thread Stefan Claas
Michał Górny wrote: > Given that SKS pool is entirely open, it is rather trivial for a single > malicious entity to set multiple new keyservers up, and gain advantage > over other servers in the pool. In fact, this is probably easier than > corrupting the single central server. Fully agree. I

Re: New keyserver at keys.openpgp.org - what's your take?

2019-06-14 Thread Teemu Likonen
Wiktor Kwapisiewicz [2019-06-14 11:59:16+02] wrote: > Storing endless amounts of data without any kind of verification was a > bad idea. Maybe SKS was designed in good old times when no-one would > try to take advantage of it but in 2019 validating e-mail address is > bare minimum a service such

Re: New keyserver at keys.openpgp.org - what's your take?

2019-06-14 Thread Michał Górny
On Fri, 2019-06-14 at 11:56 +0100, Damien Goutte-Gattat via Gnupg-users wrote: > Hi, > > On Fri, Jun 14, 2019 at 10:12:51AM +0200, Oscar Carlsson via Gnupg-users > wrote: > > I'm generally curious on your opinions on the latest new keyserver, > > this time running a new software than the normal

Re: New keyserver at keys.openpgp.org - what's your take?

2019-06-14 Thread Stefan Claas
Damien Goutte-Gattat via Gnupg-users wrote: > Hi, > > On Fri, Jun 14, 2019 at 10:12:51AM +0200, Oscar Carlsson via Gnupg-users > wrote: > >I'm generally curious on your opinions on the latest new keyserver, > >this time running a new software than the normal keyservers. > > For what it's

Re: New keyserver at keys.openpgp.org - what's your take?

2019-06-14 Thread Damien Goutte-Gattat via Gnupg-users
Hi, On Fri, Jun 14, 2019 at 10:12:51AM +0200, Oscar Carlsson via Gnupg-users wrote: I'm generally curious on your opinions on the latest new keyserver, this time running a new software than the normal keyservers. For what it's worth, my main concern is that it is a centralized service.

Re: New keyserver at keys.openpgp.org - what's your take?

2019-06-14 Thread Andrew Gallagher
On 14/06/2019 09:31, Teemu Likonen wrote: > Oscar Carlsson via Gnupg-users [2019-06-14 10:12:51+02] wrote: > >> I'm generally curious on your opinions on the latest new keyserver, >> this time running a new software than the normal keyservers. >> >> They seem to have a different model which

Re: New keyserver at keys.openpgp.org - what's your take?

2019-06-14 Thread Wiktor Kwapisiewicz via Gnupg-users
Hi Oscar, On 14.06.2019 10:12, Oscar Carlsson via Gnupg-users wrote: I'm generally curious on your opinions on the latest new keyserver, this time running a new software than the normal keyservers. It's definitely faster and more responsive. That was my personal pain point when interacting

Re: New keyserver at keys.openpgp.org - what's your take?

2019-06-14 Thread Teemu Likonen
Oscar Carlsson via Gnupg-users [2019-06-14 10:12:51+02] wrote: > I'm generally curious on your opinions on the latest new keyserver, > this time running a new software than the normal keyservers. > > They seem to have a different model which minimize the amount of > information available, to be

Re: New keyserver at keys.openpgp.org - what's your take?

2019-06-14 Thread Oscar Carlsson via Gnupg-users
2019-06-14 10:31 skrev Teemu Likonen: Oscar Carlsson via Gnupg-users [2019-06-14 10:12:51+02] wrote: I'm generally curious on your opinions on the latest new keyserver, this time running a new software than the normal keyservers. They seem to have a different model which minimize the amount

New keyserver at keys.openpgp.org - what's your take?

2019-06-14 Thread Oscar Carlsson via Gnupg-users
Hi, I'm generally curious on your opinions on the latest new keyserver, this time running a new software than the normal keyservers. They seem to have a different model which minimize the amount of information available, to be compliant with GDPR and friends. Do you think there are any