Re: [Sks-devel] heads-up: another attack tool, using SKS as FS

[Jeremy T. Bouse]

On 7/14/2018 9:42 AM, Hendrik Visage wrote:

On 14 Jul 2018, at 13:04 , Gabor Kiss <address@hidden> wrote:

Then let's drop keys that don't contain a valid email address in the key id.

How do you propose to validate the email address?

(Hint: this is a surprisingly hard problem.)

See also "web of trust" and "strong set".
Addresses should/can be checked by humans worldwide who sign/certify the key.

I’ve been trying to get mine “signed” by Web-Of-Trust for years now… also not that “easy” ;(

    Find a local Debian Developer... Most of the Debian Developers are part of the strong set and they're all over the globe.