Access experimental subpackets of 'User Attribute Packet'

Mark H. Wood mwood at IUPUI.Edu
Fri Aug 12 16:00:38 CEST 2005


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Fri, 12 Aug 2005, David Srbecky wrote:
> Unfortunately I am not asking for problem, the problem is already here.
> Users already can upload their photo albums to keyserver and no-one can
> stop them. One vCard and a few preferences really won't make it any
> worse, these are small compared to images.

Better you should lobby the vCard maintainers to define "message integrity
suggestion" fields, so your vCard can include a key fingerprint and
preferred server.  The vCard is already attached to your message -- we
don't need another copy in the key.

Finding out more contact information for you is an identity question, not
an authentication question.  The key need contain only information which
helps us to bind it to its owner, such as an email address or a small
photo.  That some of the information on a vCard can be used for such
purposes is incidental; that's not what it's for, and what it's for is not
what keys are for.

Packing too many different kinds of information into a single service is a
kind of overoptimization.  Better to build several clean, simple,
well-defined services and let clever people figure out new combinations of
data as they have need.  Then they can just join records across the
services holding what they need for a custom view of the available data
which accomplishes their purposes.

- -- 
Mark H. Wood, Lead System Programmer   mwood at IUPUI.Edu
Open-source executable:  $0.00.  Source:  $0.00  Control:  priceless!

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: pgpenvelope 2.10.2 - http://pgpenvelope.sourceforge.net/

iD8DBQFC/Kuzs/NR4JuTKG8RAhEhAJkBrkH2YwNKfo2NSIvZO/2gBCC70gCbBE2x
wONtO+Ihs5xZOlzFAWBYLzw=
=YfpL
-----END PGP SIGNATURE-----



More information about the Gnupg-users mailing list