Re: [Sks-devel] Displaying user images on index page

[David Shaw]

On Wed, Feb 25, 2004 at 12:53:22PM -0700, Chris Kuethe wrote:
> On Wed, 25 Feb 2004, Sacha J. Bernstein wrote:
> 
> > 
> > Along the lines of stopping abuse, and this may be the wrong forum for this
> > discussion, but has anyone thought about a fair and hard to abuse method of
> > removing keys from the keyserver network?
> > 
> 
> Blacklist of keys? X509 supports certificate revocation lists, why don't we,
> as the server admins, publish a list of key IDs, hashes that we won't serve.
> it's purely voluntary on the part of each server admin, but this way if I
> find an Evil Key, I refuse to hand it out on a webpage and publish this fact
> to the other admins who may or may not agree with my decision and react as
> they see fit.

I'm not sure how well this scales.  There is nothing (aside from 2-3
seconds of time) stopping the bad guy from just making another key and
using that instead.

David