[Sks-devel] stripping GD sigs (was: Re: clean sigs)

David Shaw dshaw at jabberwocky.com
Mon Sep 12 04:31:26 CEST 2005


On Fri, Sep 09, 2005 at 03:00:31PM +0200, Johan Wevers wrote:
> David Shaw wrote:
> 
> >Known by *you*.  I rather think the GD is a good signer, for what it
> >is.
> 
> I think both of you need to make a difference between a bad signer that
> signs keys without doing sufficient checking, and a signer that spams
> signatures in quantities that could become a DOS attack. The GD falls
> in the second category, not in the first.

No, actually it doesn't.  The GD doesn't distribute signatures in
bulk.  In fact, you have to fetch each new signature manually.

David



More information about the Gnupg-users mailing list