Garbled data in keyservers

Werner Koch wk at gnupg.org
Thu Dec 6 15:22:14 CET 2018


On Thu,  6 Dec 2018 14:05, stefan.claas at posteo.de said:

> Understood. Please check this example, a key with with plenty of data,
> which only needs to be extracted.
>
> https://pgp.circl.lu/pks/lookup?op=get&search=0x73253A1F090C53B6

Surely you can put arbitrary data into into a user-id. 

> That's right, but my thought is / was someone can (ab)use key servers
> as data storage / retrieval system and then only provides the key id

As it has been commeted, there are easier ways to do that.


Salam-Shalom,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20181206/86ae6650/attachment.sig>


More information about the Gnupg-users mailing list