Re: [Sks-devel] stripping GD sigs (was: Re: clean sigs)

Jason Harris <[email protected]> Thu, 8 Sep 2005 23:10:23 -0400
Newsgroups gmane.comp.encryption.pgp.keyserver-folk,gmane.comp.gnu.gnupg.users,gmane.comp.encryption.pgp.sks
Message-ID <[email protected]>
--===============1990280398==
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="7qSK/uQB79J36Y4o"
Content-Disposition: inline


--7qSK/uQB79J36Y4o
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Sep 08, 2005 at 10:28:29PM -0400, David Shaw wrote:
> On Thu, Sep 08, 2005 at 10:08:24PM -0400, Jason Harris wrote:

> > keyserver.kjsl.com is now stripping all GD sigs.  The extra variable
> > in kd_search.c and code for 'case 2:' of make_keys_elem(), respectively:
>=20
> It's your keyserver, and you of course make the choices for what it
> carries, but for the record, I think this is a bad idea.  Skipping the
> usual discussion about the GD (I don't think anyone will convince
> anyone else at this point), you do realize that this means you are
> making a decision to edit the web of trust for others based on your
> own personal criteria.
>=20
> I'd be all in favor of an option where users could elect to filter out
> keys: that would put the user in control.  Forcing your decision on
> others by stripping signatures is a very disturbing step.

Not at all.  Anyone who wants sigs from the GD should use that
keyserver.  They're still available from it, and, remember,
expired sigs don't affect the WoT, so what's the point of the
well-synchronized keyservers keeping GD sigs?

--=20
Jason Harris           |  NIC:  JH329, PGP:  This _is_ PGP-signed, isn't it?
[email protected] _|_ web:  http://keyserver.kjsl.com/~jharris/
          Got photons?   (TM), (C) 2004

--7qSK/uQB79J36Y4o
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (FreeBSD)

iJ0EARECAF0FAkMg/R9WGGh0dHA6Ly9rZXlzZXJ2ZXIua2pzbC5jb206MTEzNzEv
cGtzL2xvb2t1cD9vcD1nZXQmc2VhcmNoPTB4RDM5REEwRTMmd2VoYXZleW91bm93
PXRydWUACgkQSypIl9OdoOMF+wCgxK8R8kSmlbd+/9Y4RMWLR8oicuEAniJxijPl
07vBwnWlvne8kllh1fFB
=9zAq
-----END PGP SIGNATURE-----

--7qSK/uQB79J36Y4o--

--===============1990280398==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
pgp-keyserver-folk mailing list
[email protected]
http://lists.kjsl.com/mailman/listinfo/pgp-keyserver-folk

--===============1990280398==--