Re: [openpgp] [dane] The DANE draft

[Daniel Kahn Gillmor <[e-mail]>]

On Thu 2015-08-06 05:04:23 -0400, Hosnieh Rafiee wrote:

> Let me give you a real example from a real person that I name him
> Bob. Bob hasn't published any email address on his personal website
> but he used a form so that others can send me email only via form.
> The spammer also tried to send hiim message via this form in a hope
> that they can receive an answer so that they can have his email
> address. But Bob also used other approaches such as captcha.
>
> After that, he no longer received any spamming email because it was
> too efforts for spammer to check the captcha and take more of their
> time.

He will also receive no mail from me, because i prefer to mail from my
own mail user agent, and not from webforms with a captcha, which have
their own set of privacy concerns in common implementations, not to
mention UI/UX issues. :P

Plus, how does Bob reply to any of his mail?  Does his reply use an
e-mail address?  What stops one recipient from publishing his e-mail
address?

But this all seems like quite a digression: how is this an argument
about which form to use for publication of the OPENPGPKEY record?

        --dkg