Conversation

So someone came up with an attack on the SKS keyserver network that DoSes GPG: https://gist.github.com/rjhansen/67ab921ffb4084c865b3618d6955275f

That's bad, but I'm disliking the reaction, which boils down to "we've known about this problem for a decade. Why did you write an exploit?" Well, perhaps because you didn't fix it for a decade.

Also, there are some issues with "we delete no key, ever, no matter what". Even if a user posts child porn as their photo ID? (Or insert [locally highly illegal thing] here.) That seems shortsighted.