Re: keyserver.insect.com GDRP takedown request

2022-05-27 Thread Wiktor Kwapisiewicz
On 27.05.2022 10:47, Kiss Gabor (Bitman) wrote: We have received the same take down request from Mr. Puerto as several other keyservers under GDRP. IMHO Mr. Puerto must show some evidence first about the key to delete belongs to him. Otherwise any impostor can make delete other guys' key.

Re: shutdown of pgpkeys.co.uk and pgpkeys.uk

2021-06-23 Thread Wiktor Kwapisiewicz
Hi Gunnar, > Hagrid is IMO a no-go: in order to solve the greatest shortcomings of > SKS, it drops one of OpenPGP's greatest features: the Web of > Trust. Yes, for many, the WoT is an anachronistic holdout... But many > among us still believe in it. > > (...) > > (For full disclosure: I recently

Re: Updated GPG Key

2020-05-21 Thread Wiktor Kwapisiewicz
On 21.05.2020 20:31, Todd Fleisher wrote: > Cc’ing the list in case someone else has a good, current copy of it and > could send it my way. Kristian's key can be retrieved through Gentoo's Web Key Directory: Check list of developers here: https://gentoo.org/inside-gentoo/developers/ Kristian's

Re: Analyzing dumps (Was: 6 million)

2020-05-03 Thread Wiktor Kwapisiewicz
Hi, Just a wild guess but maybe the packet continues in the next dump file? That is the thing that breaks down dumps just cuts them at byte boundaries not packet boundaries. On 03.05.2020 11:15, Kiss Gabor (Bitman) wrote: > Another observation: some keys have enermous amount of signatures. >

Re: 6 million

2020-05-01 Thread Wiktor Kwapisiewicz
On 02.05.2020 07:55, Gabor Kiss wrote: > I would create such a programs from the scratch but I cannot > find even the format description of the dump file. :-( Last time I checked dumps where just packet piles so any OpenPGP tool could read it. I did a small proof-of-concept some time ago to read

Re: [Sks-devel] Fwd [from schleuder dev team]: Signature-flooded keys: current situation and mitigation

2019-07-19 Thread Wiktor Kwapisiewicz via Sks-devel
Hi Andrew, On 18.07.2019 19:35, Andrew Gallagher wrote: A key owner can (preferably automatically) create a “self-identity” on her primary key consisting of a well-known string that contains no personal information. To avoid breaking legacy search-by-id systems this string should be unique

Re: [Sks-devel] [Autocrypt] [openpgp-email] Keyservers and GDPR

2018-11-07 Thread Wiktor Kwapisiewicz
Hello, On 07.11.2018 18:17, Tobias Mueller wrote: > That said, I think we can store revocations in the CT logs s.t. we can > at least have integrity protection and non-equivocation for those. Both > properties which we currently do not have when fetching them from the > key server. Mozilla

Re: [Sks-devel] [openpgp-email] Keyservers and GDPR

2018-11-07 Thread Wiktor Kwapisiewicz
On 07.11.2018 11:50, Andrew Gallagher wrote: > >> On 7 Nov 2018, at 10:16, Yegor Timoshenko wrote: >> >> World-writable storage is problematic even if there is no search. >> Proof of work and some operator-controllable data removal >> mechanism (like opt-in key blacklists) can help limit this