On Thu, 29 Sep 2011 14:19:25 -0600, Stephen John Smoogen
On Thu, Sep 29, 2011 at 13:16, seth vidal
> I'd like to put a new policy in place which goes something like
> If you upload your private keys (encrypted or not) we will remove
> then we will remove your public keys from FAS and force you to login
> give a new one in FAS.
> We do the last step on the basis that your private key, being on a
> networked, multi-user machine is now exposed to the world and
> potentially compromised. So we can no longer trust it.
+1 since publishing their private keys on a web page is probably not
> infrastructure mailing list