Updated OpenPGP Security (markdown)

Dominik Schürmann 2015-01-05 16:19:29 +01:00
parent 7d41cfde56
commit 8c73e912df
1 changed files with 1 additions and 1 deletions

@ -30,7 +30,7 @@ If a secret key is lost, the public key is still valid for 1 year in average and
Some argue that expiry dates helps keeping the keyservers clean from valid but unused keys:
Anyone could upload keys with User IDs containing the email of others, thus it is easy to flood keyservers with valid keys without the consent of the entity who controls the email address.
Thus, expiry dates are no valid fix for a much bigger problem that lies in the way PGP keyservers operate currently.
Generally, PGP keys need to be validated through other channels than keyservers to rely on them.
In general, PGP keys need to be validated through other channels than keyservers to rely on them.
#### Revocation certificate?
TODO