DISQUS

dmiessler.com | grep understanding: Why Don’t We Clean Up The PGP Key Servers?

  • Darren Chamberlain · 3 years ago
    +1

    I think the operators of the keyservers disagree, though. In the past, I spent some time on the gnupg-users list, and every once in a while someone would ask how to delete their old unusable keys, and the keyserver operators would chime in with reasons about why it was a bad idea. I don't remember most of the reasons, but I was never quite convinced.
  • Zhasper · 3 years ago
    +1

    Hear Hear!
  • Daniel Miessler · 3 years ago
    I'd be interested in hearing their reasons. I can see why not to allow arbitrary key deletion from users, but they should consider doing a "house cleaning".
  • Jason Powell · 3 years ago
    I am deeply troubled by the PGP clutter. Seriously, this keep s me up at nights. ;)
  • Daniel Miessler · 3 years ago
    Peoples' comments who don't use PGP don't count. ;)
  • Jason Powell · 3 years ago
    I beg your pardon, but I actually do use PGP, daily. So there. Nuh.
  • Calum · 3 years ago
    Just saw your post on Digg, and yes, I think we've all lost the key (and passphrase) from the time we tried it first in 1998.

    pgpkeyserver # rm /var/spool/keys/* -rf
    pgpkeyserver #
  • Tortanick · 2 years ago
    Like most PGP users I have at least one unrevoked public key from my early experiments lyeing around, I'd like to see this problem fixed too.

    My own suggestion would be to ban keys with infinite expirery dates. 3 years should be the absolute maximum. Any infinite timed keys in existance shall be given 3 years untill expery.