What is wrong with PKI - SKS keyserver flaws!
summary
Explains flaws in SKS OpenPGP keyservers and how those vulnerabilities reflect problems in current PKI infrastructure. Describes PKI concepts and suggests several alternative approaches, and includes a demo showing the SKS keyserver flaw.
AI-written summary · about
chapters (7)
- 0:00Intro
- 1:02Public key crypto
- 6:50PGP relies on key servers
- 9:55Certificate spamming attack
- 10:28Too many attestations?
- 11:37The attack
- 14:58PKI (Public key infrastructure)
related talks
40mDigital Identities - 21 PKI Pitfalls and How Best to Avoid Them
38mPKI deployments are as unique as any snowflake; how to build equally flexible PQ migration strategie
30mPKI Well Revised: Common Mistakes Which Lead to Huge Compromise of Identity
21mNation-State Attacks on PKI
56mIoT: Taking PKI Where No PKI Has Gone Before
36mYou Like It Or Not; You Need It! - PKI And Certificate Management
31mPKI the Wrong Way: Simple TLS Mistakes and Surprising Consequences
16mPKI problem: who we actually trust