Hacker News Reader

Mr. Khadeer's key was sourced from SKS:

https://sks-keyservers.net/pks/lookup?op=vindex&search=mhkha...

And appears to be the only search result for the name Khadeer.

If I were him, I would certainly like to know this.

And whatever process produced this key, is of interest to all PGP users, whatever NSA shills' squid ink to the contrary.

View on HN

According to GnuPG (more specifically "gpg (GnuPG/MacGPG2) 2.0.28"), that key does not contain any valid user IDs. Is there some widely used PGP implementation that does accept that? Have you found any other similarly weak keys that GPG will consider valid? If so, I'd find it very interesting as a PGP user, but if it is limited to keys that GPG, at least, recognizes as invalid, I'm not sure what impact it has for me.

GPG 1.4 didn't eat it. 'pgpdump', fwiw, did.

I have not tested any of the extant proprietary (e.g., MS-Win) PGP clients, quite possibly these items was meant for one such.

Neither I nor - afaik - anybody else, at least publicly, have any notion as to who generated the keys, on what, and for what purpose.

Reply on news.ycombinator.com