Re: [Sks-devel] The pool is shrinking

[Ryan Hunt]

One could argue the inverse, to me its very strange that administrators of a scheme designed from the onset to be resilient to governmental scale interference would widely open their arms to multinational scale interference. 

Its about pretty good privacy, not perfect privacy.. by design w/PGP and SKS, public keys are designed to be public, and not private.. in order to keep the private part secure, allowing people to arbitrary purge public data entirely undermines the entire thing.

-Ryan

On Thu, Aug 15, 2019 at 6:39 PM Arnold <address@hidden> wrote:

I thought SKS and PGP-keys is about one's ability to hide private data (by
encryption). GDPR is also about one's ability to hide private data (by having
private data, that can be used in correlations, removed from large databases). Yet,
SKS administrators who apparently live outside the EU argue strongly that there is
no need for them to support GDPR.

To me, it is very strange to read one strongly supports one form of privacy, while
totally ignoring other forms. In fact it seems to me these operators are not only
ignoring other forms, but it seems they do not even acknowledge the fact that to
*some* people in the world the other (GDPR) form may be very important as well.
Remember, people in different parts of the world do have different values and
different needs.

Arnold

On 15-08-2019 18:39, Robert J. Hansen wrote:
>> Well, it was just one of many example sites...
>
> Again: I'm going to go with the real advice given to me by real lawyers.
>
>> So as an example, US SKS key server operators do not have to honor
>> removal request (in this case shut-down the server) from EU citizens,
>> when they receive a letter from a lawyer?
>
> Depends on the individual.  I rarely travel to Europe and have no
> financial holdings there.  It gives me a great ability to say "no, I'm
> not signatory to your treaty, go away."  Other Americans may have enough
> ties to Europe to make it possible for EU courts to apply leverage.
>
>> I remember also that plenty of US sites (small and large), where I
>> did business with, asked for my consent as EU citizen, when they
>> changed their privacy policy once the GDPR took place.
>
> Some of them do business in Europe and are susceptible to pressure by
> the EU.  Some of them were just jumping on the bandwagon.
>
>> Has an US SKS key server operator then not 'business' ties with EU
>> citizens, when storing their personal data like name and email address?
>
> No.  Those are considered facts no different than tracking a name and
> phone number.  Mere facts cannot be suppressed by the United States
> government; citizens are allowed to share them to our heart's content.
>
>> And has Mr. Rude then the right to freely distribute this data, without
>> protecting it, to the whole world?
>
> I don't know anything about him or where he lives or which laws he must
> follow.
>
> _______________________________________________
> Sks-devel mailing list
> address@hidden
> https://lists.nongnu.org/mailman/listinfo/sks-devel
>


_______________________________________________
Sks-devel mailing list
address@hidden
https://lists.nongnu.org/mailman/listinfo/sks-devel