> I'm with Rob. The keyservers should always host full certificates. Once we > start expiring keys or modifying them by removing bits, we become the > Untrusted Keyserver Cabal. Many would abandon us, probably forking to create a
There is no guarantee that one can trust all of current key servers. Some of you guys fears of conspiration theories. Here I present one. :-) If I was related to certain Asian governments I'd set up a fake key server that is the only reachable from the country then I'd serve manipulated keys to certain clients. Gabor _______________________________________________ Sks-devel mailing list Sks-devel@nongnu.org https://lists.nongnu.org/mailman/listinfo/sks-devel
