-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 > There is somewhat constant debate over the best method. Many believe > that Email addresses are 'harvested' from the Servers by bots > intent on > increasing the Spammers database.
For whatever it's worth, I consider this one to be very strongly indicated. Consider the address kc0sje @ myemaildomain. It's not exactly one that would be picked at random. The only published way to find that address is to enter my ham radio station ID in at the American Radio Relay League's web page and find "kc0sje @ myemaildomain" as my contact info--and it seems unlikely spammers would harvest from the ARRL. That email address was up on the ARRL's page for a few months before I added it to one of my keys. In under a week, I started getting spams to that email address. There are two obvious ways I can see spammers picking it up. Either (1) they've got a copy of all American amateur radio station IDs and are polling the ARRL's information, one record at a time, to compile them, or (2) they're harvesting addresses off keyservers. Of the two, #2 seems far, far more likely. > Many others argue that they haven't been affected by /increased/ > Spam and > not publishing to the Servers negates the ability to Verify a Sig > from a > Key not currently existing on the recipients Keyring. I agree to this one, too. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (Darwin) iQEcBAEBCAAGBQJFvUHBAAoJELcA9IL+r4EJGu0H/28pD4TwNQ8Sq2V5FJUyUN7c K1zRh2HsUtD7rcXq5+sVFLnQJuhJSpxvOZWGMAedfTcBOb3vD/HEEJ2bq9l9sAfz Hmu8z55fEbRyOuEC0YEaZWOKMgWHy0QmzCE+3A6MWeDDiwcLAXbROjKrl4zoWSeo pbIa3OlyWXR3uNV0V55nSCuLK2/7aRX6ZVpKYawB8jhA50USfav7kxFKgWVUZGUH sc8JPw5vpvRQ4VzMLh3GPBcHp8d8UVWe+dUHHjZ9ew2EqD+VX829r70uU/O3sk8i b8b/XDUayggnsgN9P0bF7YRRK/sfl7/sLZcAtoS5UCiQeN3Qj0ROm2kD+XLFxTQ= =FxU/ -----END PGP SIGNATURE----- _______________________________________________ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
