Re: [Sks-devel] nokeyserver annotation

[Christoph Egger]

Hi!

Kim Minh Kaplan <address@hidden> writes:
> Daniel Kahn Gillmor wrote:
>> I'd like the keyservers to reject keys with any self-sigs with the
>> "nokeyserver" notation.  The novel thing is that this notation doesn't
>> exist yet :)

> - how does one propagates a "nokeyserver" annotation on a key in the
>   SKS network when this network does not carry said key

Assuming the intention is tagging my key (which hasn't been published so
far) so it doesn't end up on the keyserver. In that case *all* self-sigs
would need to carry the notation as otherwise an intruder could just
remove the newest nokeyserver selfsig and still have a valid key (iff
all self-sigs have that flag, no upload can be crafted that has
verifying self-signatures and not carry the flag).

  Christoph