Re: Key search interface and email address harvesting

-----BEGIN PGP SIGNED MESSAGE-----

Hi Teun,

Teun Nijssen wrote:
| Hi Reimer,
|
| Reimer Karlsen-Masur, DFN-CERT wrote on 2005-02-07 15:40:
|
|>
|> The reason behind this is that obviously some spammer harvested an
|> emailaddress from a PGP keyserver. Since this email address was
|> specifically
|> created as a bait for keyserver mailaddress harvester it seems that
|> spammers
|> are crawling through (the wildcard) search of PGP keyserver.
...
|> I would like to hear from you how you are dealing with this kind of
|> threat?
|
|
| not.... The only problem that you are not mentioning is that unless
| *all* keyservers implement exact matches, any measure does not work. I
| don't see that happening soon....

yep, I thought of this one - but forgot to put it explicitly into the mail...

On the other hand, it is one of the reason for me to direct these questions
to many PGP keyserver operators via the list :-)

Cheers

Reimer
- --
Dipl. Inform. Reimer Karlsen-Masur (PKI Team), DFN-CERT Services GmbH
https://www.dfn-cert.de, +49 40 808077-615 / +49 40 808077-555 (Hotline)
PGP RSA/2048, 1A9E4B95, A6 9E 4F AF F6 C7 2C B8  DA 72 F4 5E B4 A4 F0 66

12. DFN-CERT Workshop und Tutorien, CCH Hamburg, 2-3. Maerz 2005
Infos/Anmeldung unter: https://www.dfn-cert.de/events/ws/2005/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iQEVAwUBQgh1aRKWILoankuVAQEqowf8DGGPqnJ/kIZUAm/gaDlXZ5E1W9Fnv0gX
Jpg7p//AB0Uy6lxYie0peFLYEzKwF5XvdQRsXArFYDQRH3pTkohMlzT7rTlu9dQv
i6xz6nj8eph+YY4fCclHNYOXQC6+yVhijdXnVCSt3Uo3RFImw9oI3kRHTpZd69h2
mk/GObA5XcEsAVvJ4Vksg8HS11IApKxThPMDkIhLxzZuXqs4s/mMDvVFP1u6EZgQ
azE2Xnat6+XWzK3d+rYUB/Lz9yI7MNqkjn781Y2QX6JURQwZUcYdyFVwnxftaZzp
B5xhLmLP1jFW0i7+/sy79V/uoQ1s46WRM8tSBzo8OCJrAr76v0uwKg==
=KtAK
-----END PGP SIGNATURE-----