Updated OpenPGP Security (markdown)
parent
7d41cfde56
commit
8c73e912df
|
@ -30,7 +30,7 @@ If a secret key is lost, the public key is still valid for 1 year in average and
|
|||
Some argue that expiry dates helps keeping the keyservers clean from valid but unused keys:
|
||||
Anyone could upload keys with User IDs containing the email of others, thus it is easy to flood keyservers with valid keys without the consent of the entity who controls the email address.
|
||||
Thus, expiry dates are no valid fix for a much bigger problem that lies in the way PGP keyservers operate currently.
|
||||
Generally, PGP keys need to be validated through other channels than keyservers to rely on them.
|
||||
In general, PGP keys need to be validated through other channels than keyservers to rely on them.
|
||||
|
||||
#### Revocation certificate?
|
||||
TODO
|
||||
|
|
Loading…
Reference in New Issue