[7719] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

Re: PGP ADK Bug Fix

daemon@ATHENA.MIT.EDU (Michael Paul Johnson)
Mon Aug 28 10:39:15 2000

Message-Id: <4.3.2.7.2.20000827222517.00c04c90@ebible.org>
Date: Sun, 27 Aug 2000 22:27:35 -0600
To: cryptography@c2.net
From: Michael Paul Johnson <mpj@ebible.org>
In-Reply-To: <3.0.5.32.20000827115716.00797430@idiom.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"

At 11:57 AM 8/27/00 -0700, Bill Stewart wrote:
>...
>The real question is whether somebody will hack the keyservers
>to eat ADK keys before or after somebody downloads all the DH keys,
>adds ADK keys to them, updates the servers, and threatens to publish....
...

It looks like NAI is treating this with the seriousness it deserves, and has already modified two key servers to "cleanse" keys with unsigned ADK parasitic records: http://www.pgp.com/other/advisories/adk.asp



_______

Michael Paul Johnson                   
mpj@eBible.org    http://ebible.org/mpj



home help back first fref pref prev next nref lref last post