On 05/26/2009 05:48 AM, Thijs Kinkhorst wrote:
> I'm a satisfied user of an SKS keyserver, but have not really encountered
> serious trouble with subkeys.pgp.net in the past, so I'm not against the
> change but also not explicitly in favour of it.
> 
> What is the problem exactly with subkeys.pgp.net?

My experience is that subkeys.pgp.net has many more non-responsive
nodes, and that pool.sks-keyservers.net is more active in clearing out
non-responsive keyservers from its round-robin DNS.

Of course, this could change at the whim of the admins of either pool,
but the recent history of the pools seems to be that sks-keyservers is
better-managed.

For example, try:

for ks in $(dig +short subkeys.pgp.net); do
  if (printf "GET /pks/lookup\r\n\r\n" | nc $ks 11371 >/dev/null) ; then
    echo $ks success
  fi
done

and repeat for the IP addresses in pool.sks-keyservers.net.

with subkeys.pgp.net right now, i get 1 failure, 5 successes.  with
pool.sks-keyservers.net, i get 10 successes.

        --dkg

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to