This is good to know. So in order to prevent the abuse of keyservers and increase the proliferation of them what should be done? 1. limit the size of keys (EC

This is good to know. So in order to prevent the abuse of keyservers and increase the proliferation of them what should be done? 1. limit the size of keys (ECC or edd25519 plus hard limits fixes this, yes?) 2. provide a verified submission for keys and signatures (have users sign their submissions) 3. verify email addresses? (i don't care about this one) 4. disallow old, vulnerable, or insecure keys or cryptographic methods? (require new crypto as necessary) 5. Provide new open source key server software entirely? Update the old stuff because it's still salvageable? I find it funny as hell that the author is worried about data retention policies when it's baked into the software and it's explicitly stated in many places that the keys can't be removed. Maybe I should just read https://gitlab.com/dkg/draft-openpgp-abuse-resistant-keystore/blob/master/draft-dkg-openpgp-abuse-resistant-keystore.md https://gitlab.com/dkg/draft-openpgp-abuse-resistant-keystor... and just implement everything that doesn't seem like a big brother suggestion.