Re: [Sks-devel] Displaying user images on index page

[Daniel Johnson]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 25 Feb 2004 at 21:29, Yaron M. Minsky wrote:
> SKS and PKS and all of the PGP keyservers are not equipped to
handle DOS
> attacks.  I would argue that it is unwise to discuss the details in
> public, and the facts are clear to anyone who understands the basic
> keyserver model.

I agree completely.  However, despite your earlier hint that perhaps
this topic should be quietly dropped, many of the 30+ messages in
this thread seem to take the position of "we can, so why shouldn't
we?" rather than "is this really such a great idea?".

My fear is that by implementing such features the facts would be
advertised to the less technically-inclined (and moral?) populace. 
For now, such issues are probably considered only by developers,
operators, and high-end users.  Thankfully this list is primarily a
subset of the first two categories.

> There are ways of protecting from such attacks
> (require posters to solve computationally difficult puzzles before
> adding keys), but they require a fundamental change in the way the
> keyserver system works.
> 
> The current keyserver system may be doomed, and such a change may
be
> needed.  But let's not hasten the day by giving out the details.

I should not have been so detailed in my message, and I apologize. 
Perhaps it should be removed from the mailing list archive?

- -- 
Through the modem, off the server, over the T1, past the frame-relay,
< < NOTHIN' BUT NET > >
 
Daniel Johnson
address@hidden
http://dannyj.come.to/
Public PGP Keys & other info: http://dannyj.come.to/pgp/


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (MingW32) - GPGshell v2.95

iD8DBQFAPWr36vGcUBY+ge8RAoA/AKCIMdgeJtoOPZNTm+eBEh7l3RyGAACg6FQY
iH7H86OgQNhDul2+wE1ngQU=
=UdqU
-----END PGP SIGNATURE-----