[OT] New keyserver

Jan-Benedict Glaw jbglaw@lug-owl.de
Tue Sep 24 11:40:02 2002


--yr/DzoowOgTDcSCF
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, 2002-09-23 16:48:22 +0200, disastry@saiknes.lv <disastry@saiknes.lv>
wrote in message <3D8F29B6.ECB9E13@saiknes.lv>:
> keyserver does not need to sign keys,
> however it would be nice if it could verify signatures, so that it can re=
ject
> userids without valid selfsig.

Seems I don't get the point. What's wrong with UIDs without
self-signatures? Though, they're *not* what you think about them (being
"valid" UIDs), but technically, everybody can attach any UIDs to any
key. ...and GnuPG doesn't trust UIDs without self-signatures, so
everything is okay (from my point of view).

What could be said is that it would be a nice feature to not transmit
UIDs with missing self-sigs, because they're a) not worth anything and
b) probably the result of bad kiddies. Am I wrong here?

MfG, JBG

--=20
   - Eine Freie Meinung in einem Freien Kopf f=FCr
   - einen Freien Staat voll Freier B=FCrger
   						Gegen Zensur im Internet
Jan-Benedict Glaw   .   jbglaw@lug-owl.de   .   +49-172-7608481
	 -- New APT-Proxy written in shell script --
	   http://lug-owl.de/~jbglaw/software/ap2/

--yr/DzoowOgTDcSCF
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE9kDNBHb1edYOZ4bsRAtGsAJ9MI0u1udrEDgto4GUQoAi//KjSwACeNbtj
sTzjp+8y4Pl15PDk/yEognQ=
=AomG
-----END PGP SIGNATURE-----

--yr/DzoowOgTDcSCF--