[newmaint-site] Matching emails of same contributor ala carnivore - Was: Re: contributors.debian.org milestones

[Enrico Zini]

On Sat, Dec 14, 2013 at 02:03:32PM +0100, Enrico Zini wrote:

> carnivore/keyringanalyzer.py uses key IDs because in the original code
> it used that way to correlate 'pub' entries to their 'uid' and 'fpr'
> entries. If there can be some other way (like if gpg gives guarantees of
> always showing material from the same key grouped together), I'd gladly
> ignore key IDs completely. I agree with dkg: they're just potential
> vectors of attack.

Correction: it's fixed now, it ignores key IDs completely.


Ciao,

Enrico

-- 
GPG key: 4096R/E7AD5568 2009-05-08 Enrico Zini <enrico at enricozini.org>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/newmaint-site/attachments/20131214/523b793d/attachment.sig>