Protecting OpenPGP keyservers from certificate flooding

by Gunnar Wolf
At: DebConf 24
debconf24.debc...
At DebConf22, I presented my PhD project proposal, «OpenPGP Web-of-Trust: A way forward?». The main issue I decided to tackle was the prevention of certificate flooding attacks.
Two years later, I researched, implemented and experimented, and want to share the results of my work with one of the largest OpenPGP user community in the world, the Debian project.
The talk I will present brings forward the possibility of changing the protocol under which OpenPGP key certifications is performed, by requiring new signatures to be added to public keys (certificate chains) only by their owner, proving this by the means of an attestation.
Room: Somin
Scheduled start: 2024-07-30 15:00:00+09:00