keyserver.gnupg.org funded by GnuPG e. Verein

[Werner Koch]

On Fri,  7 Jun 2024 09:15, Bernhard Reiter said:

> From the conceptual side I think there is still a gap that decentralized
> pubkeyservers fill. 

Yes, for distributing revocations.  But that should be a done using a
simpler and better distributable system.  I doubt that the currently
used keyserver software is helpful.

Searching by mail address or, worse, by name too often returns keys not
actually hold by the expected holder.  As long as there is a mail
address there are simpler and more direct ways to get hold of a key.

- Asking for a key using the inital contact (mail)
- Sending the key along with the initial response.
- Using the Web Key Directory

Revocations are different because they are also needed after a mail
address stopped working.


Shalom-Salam,

   Werner

-- 
The pioneers of a warless world are the youth that
refuse military service.             - A. Einstein
-------------- next part --------------
A non-text attachment was scrubbed...
Name: openpgp-digital-signature.asc
Type: application/pgp-signature
Size: 247 bytes
Desc: not available
URL: <https://lists.gnupg.org/pipermail/verein/attachments/20240607/6fa24850/attachment.sig>