Re: [Sks-devel] The pool is shrinking

[Stefan Claas]

Andrew Gallagher wrote:

> On 16/08/2019 16:13, Stefan Claas wrote:
> > It should tell users that SKS operators share no dumps with 3rd
> > parties for key analysis, i.e. social graph research etc. Those
> > who publish a warrant canary can stay in the pool, while others
> > who don't like to do so will be excluded from the pool.
> 
> That's an utterly worthless exercise, considering that keyserver
> operators can't vouch for any other keyserver operators, and any or all
> of them could be three-letter agencies in disguise. You don't need a
> warrant to scrape publicly-available data, and you don't need to be in
> the pool to sync with pool keyservers.

They should not vouch for others only sign a monthly statement, which
Kristian can add to a column in his pool site. And like I said it
would *not* hurt! If however more key server operators  are against
this suggestion then IMHO at least people know that operators may
like to share dumps with 3rd parties, for whatever reasons they may
have.

And I think with all the discussions about the GDPR it would be also
a good sign from SKS operators doing so, while Kristian had it then
easier to maintain his pool, when getting asked questions in the future.

And addional feature could be that SKS operators implement a new
version of the .html search code, for their WWW interface, only allowing
fingerprint search, without revealing a long list of who signed whoms
pub key.

Regards
Stefan

-- 
box: 4a64758de9e8ceded2c481ee526440687fe2f3a828e3a813f87753ad30847b56
GPG: C93E252DFB3B4DB7EAEB846AD8D464B35E12AB77 (avail. on Hagrid, WKD)