NODE 1b76c008Very funny, Polyanna :-( [namespace pollution]
gtoal@an-teallach.com (Graham Toal)Mon, 28 Mar 94 11:58:59 PST
Grrr. I use a mailer here (that I'm developing) that automatically
encrypts outgoing mail for user X if "<X>" can be found in my
pgp keyring. Unfortunately some comedian has published the
key below...
Type bits/keyID Date User ID
pub 384/99CBA7 1992/11/15 Polyanna, c/o <cypherpunks@toad.com>
1 key(s) examined.
so if I use this mailer when posting to cypherpunks, it gets
encrypted for this idiot. I guess this is something we mailer
writers will just have to allow for. Looks like I'm about
to add a stop-list... (removing it from the keyring won't
be good enough, because next feature planned for my mailer
is to look up the fingerable key-server if it isn't found locally...)
G
NODE 599a6f87Re: Very funny, Polyanna :-( [namespace pollution]
Sameer <sameer@soda.berkeley.edu>Mon, 28 Mar 94 13:42:38 PST
>
> Grrr. I use a mailer here (that I'm developing) that automatically
> encrypts outgoing mail for user X if "<X>" can be found in my
> pgp keyring. Unfortunately some comedian has published the
> key below...
>
> Type bits/keyID Date User ID
> pub 384/99CBA7 1992/11/15 Polyanna, c/o <cypherpunks@toad.com>
> 1 key(s) examined.
>
> so if I use this mailer when posting to cypherpunks, it gets
> encrypted for this idiot. I guess this is something we mailer
> writers will just have to allow for. Looks like I'm about
> to add a stop-list... (removing it from the keyring won't
> be good enough, because next feature planned for my mailer
> is to look up the fingerable key-server if it isn't found locally...)
>
Keep up the good work in writing that mailer.
I think a stoplist is good for more than just jokers such as above.
There are those who have published pgp keys but they don't
have an easy-mchanism for reading pgp messages, so most mail to them
shoulnot be encrypted.
NODE 7d941714Re: Very funny, Polyanna :-( [namespace pollution]
Phil Karn <karn@qualcomm.com>Tue, 29 Mar 94 08:21:45 PST
Isn't this really just a special case of the more general problem of
deciding which keys on a public key ring you're willing to trust?
Perhaps your mailer script should automatically encrypt only when a
keyid is found with a signature trail that you trust.
I do see a signature for that key from Miron Cuperman. Perhaps
you'd want to modify your trust parameters for him...
Phil