Key poisoning

Robert J. Hansen rjh at sixdemonbag.org
Thu Aug 15 08:50:14 CEST 2019


> If the keyserver implemented a signer blacklist, (which would scrub the
> blacklisted signature from any current or incoming public keys), what
> consequences am I missing?

Someone already chimed in about how this is "enumerating badness", which
runs counter to best practices in security.

Additionally, the bad guys can create new malicious certificates faster
than the keyserver network can blacklist.



More information about the Gnupg-users mailing list