There are still SKS servers running, but several are unsynchronized, including,
apparently, pgp.mit.edu. Of course, they have the same key import/poisoning
problems already mentioned on these lists…
Here are the hockeypuck servers I could find, all synchronizing properly and
apparently
> On Aug 15, 2019, at 3:33 PM, Werner Koch wrote:
>
> On Thu, 15 Aug 2019 00:02, gnupg-users@gnupg.org said:
>
>> But at least then we will want to add cryptography to see which
>> selfsigs are truly legitimate, right?
>
> That would be the first and most important step to get the keyservers
> On Aug 14, 2019, at 6:32 PM, MFPA via Gnupg-users
> wrote:
> On Wednesday 14 August 2019 at 10:39:56 AM, in
> , Alessandro Vesely
> via Gnupg-users wrote:-
>
>> I'm no expert, but it seems to me that 3rd party
>> signatures should not
>> be allowed.
>
> Perhaps a "keyserver
off if anything goes wrong!
(you can use dyn.com or others, no servers required)
2) probably best discussed on the sks-devel list, Reply-To set accordingly
3) try running your own keyserver(s), SKS is easy enough to deploy
--
Jason Harris | PGP: This _is_ PGP-signed, isn't
/gcrypt/gnupg/
http://mirrors.dotsrc.org/gnupg/gnupg/
Thanks.
--
Jason Harris | PGP: This _is_ PGP-signed, isn't it?
jhar...@widomaker.com _|_ Got photons? (TM), (C) 2004
pgprdHkcehbzl.pgp
Description: PGP signature
___
Gnupg-users mailing
Thanks.
--
Jason Harris | PGP: This _is_ PGP-signed, isn't it?
jhar...@widomaker.com _|_ Got photons? (TM), (C) 2004
pgpE_07nLZ9le.pgp
Description: PGP signature
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org
, it is in the LD_LIBRARY_PATH quoted above, and therefore
IT IS ON THE SYSTEM, right?
If I were to guess, LD_LIBRARY_PATH is being ignored/reset...
--
Jason Harris | PGP: This _is_ PGP-signed, isn't it?
jhar...@widomaker.com _|_ Got photons? (TM), (C) 2004
pgp3I91RiXIEp.pgp
Description
in 2007
http://gd.tuwien.ac.at/privacy/gnupg/ serves files, but no listings
http://www.gnupg.ca/mirrors website, not files
--
Jason Harris | PGP: This _is_ PGP-signed, isn't it?
jhar...@widomaker.com _|_ Got photons? (TM), (C) 2004
pgpXs36HYKrA4.pgp
a .torrent
with web-based seeds? http://mktorrent.sourceforge.net/ should make
it easy to generate.
Thanks.
--
Jason Harris | PGP: This _is_ PGP-signed, isn't it?
jhar...@widomaker.com _|_
Got photons? (TM), (C) 2004
pgpxmtC70mL7Q.pgp
Description: PGP signature
aren't specifically
listed are (essentially) only self-signed and also need a connection
to/from the strong set.
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't it?
jhar...@widomaker.com _|_ web: http://keyserver.kjsl.com/~jharris/
Got photons? (TM), (C
and the
keyservers.
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't it?
jhar...@widomaker.com _|_ web: http://keyserver.kjsl.com/~jharris/
Got photons? (TM), (C) 2004
pgpgcpWWuy4Ut.pgp
Description: PGP signature
top1000table.html
b120c020a7c843fc7a76cc60ffceaddb13a9353d29491 top1000table.html.gz
029b559b576e6f3e5a46854db50fb7c66f5ff0e99707top50table.html
9bcd31ce12d03bcd9b2e83fd5310704940fd107d2489D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed
top1000table.html
8cf9a604f5cf7799c957260074eebfa20320551429506 top1000table.html.gz
9f464af31a83c9a0b04a399e3179d4cff516ac419707top50table.html
9df9d75d005471401faab9bd005e9f1544c5e4962489D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed
top1000table.html
06eee34ef4b44e62ea8569707f594d6bcbedf61529427 top1000table.html.gz
5323d32e1f5e2fe189dd25f5113e4be1657a21f69710top50table.html
6f84087ba24aebfc637addbe28d8f971fd27197c2469D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed
for all their unencrypted, signed messages and the
intended recipient(s) for each message? How would these lists
be verified?
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't it?
[EMAIL PROTECTED] _|_ web: http://keyserver.kjsl.com/~jharris/
Got photons
top1000table.html.gz
cae4113ba50ea044406ea43f943e2d51ff86760c9712top50table.html
564551becfcd0ad911704c48b1774a1f118e30152529D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't it?
[EMAIL PROTECTED] _|_ web: http://keyserver.kjsl.com/~jharris
top1000table.html.gz
ad7643888b57086d0c88be4d39cc133bc9b05dac9714top50table.html
022e831a11ef152e44e483a65638b1b712f0eea82529D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't it?
[EMAIL PROTECTED] _|_ web: http://keyserver.kjsl.com/~jharris
top1000table.html.gz
543753bdb2fee73548f6b8e3a2bc9931598946219763top50table.html
846209e98a82e5003577bdea5643041fc9219f092529D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't it?
[EMAIL PROTECTED] _|_ web: http://keyserver.kjsl.com/~jharris
top1000table.html.gz
34cdd07ae84b2a4514b9ff5efb7bf40f3bb1a65c9785top50table.html
bcc7aa2e0e46d1b08bf2324d54f9de7b64826f9a2529D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't it?
[EMAIL PROTECTED] _|_ web: http://keyserver.kjsl.com/~jharris
top1000table.html.gz
25aa72776820f1d3fdfb8fe710ec63bb3c95c0379783top50table.html
2c6f44cf8045d4e5ae172ef84e1b22605251dc432529D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't it?
[EMAIL PROTECTED] _|_ web: http://keyserver.kjsl.com/~jharris
top1000table.html.gz
d1104dc76d1e52f9fb488edf84cc1db5f042e2e09781top50table.html
5cf52de9f2c6ce4979ffa577292970fe340e84bd2529D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't it?
[EMAIL PROTECTED] _|_ web: http://keyserver.kjsl.com/~jharris
nothing.
Choose a different search engine. google.com has several hits for that
hash, and dogpile.com shows results from several search engines for that
hash.
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't it?
[EMAIL PROTECTED] _|_ web: http://keyserver.kjsl.com
-install-4.58.9-1.tar.gz.sig | tail -c 65
MailScanner-install-4.58.9-1.tar.gz.sign
% gpg ... *.sign
[snip]
[GNUPG:] VALIDSIG EE81D7633DB00BFDE1DC722211F659471415B654 2007-02-01
1170342237 0 3 0 17 2 00 EE81D7633DB00BFDE1DC722211F659471415B654
(Julian [EMAIL PROTECTED] BCC'd)
--
Jason Harris
top1000table.html.gz
0591cb468b3c1311a76be940e853773aacb3d3779800top50table.html
40a774d1848adec9c6cf3b204b1ea8182fd2a1b22529D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't it?
[EMAIL PROTECTED] _|_ web: http://keyserver.kjsl.com/~jharris
top1000table.html.gz
96623cdd38aeae9904db8df3772bdc0f19f758fe9781top50table.html
4a0ddb9ad55ed7dca50ef41dd36ec75ac3c635042529D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't it?
[EMAIL PROTECTED] _|_ web: http://keyserver.kjsl.com/~jharris
revocations _and_ removes the need to --[l]sign
keys to memorize them as expected signers and/or to juggle keyrings,
esp. with gpgv.
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't it?
[EMAIL PROTECTED] _|_ web: http://keyserver.kjsl.com/~jharris/
Got photons
24fd44baa56b935bb2e161133d9f41ff3c70144a29653 top1000table.html.gz
2dfdcc48bf337724c3de823706c8bdb5d3a53f9b9785top50table.html
fddf52c615f22c8dccb9161215e76b989c42b48f2529D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't
36e0127b31c75a1051ba0fc32ff6d973ed468faf29703 top1000table.html.gz
be7a6d26967cc3f5021bba2bfa0633fd3b25d3059791top50table.html
16c570a7443f24cb544c8eab20efec045e9fbc2d2529D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't
in another batch update:
2007-02-18 23:02:27.870255691 display_new_sig: new sig 71 by 2E604D51 added
to 2E604D51 Bruno Costacurta [EMAIL PROTECTED]
2007-02-18 23:02:27.870319946 display_new_sig: new sig 72 by 2E604D51 added
to 2E604D51 pubmb02 [EMAIL PROTECTED]
--
Jason Harris | NIC
a23e213fb8c0a2a6064100d392b337127824fdf429780 top1000table.html.gz
dae7b4ddf0d5d71940632bffb9cdbfe9a54cd80d9782top50table.html
e26e21e89dc47cbe4a79f8bf775c7eb0edb243412529D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't
c61d92b8f7f8361555d4c578270d37743cccf11029764 top1000table.html.gz
811ff47a9cc566756426eac42d85d52668f8d8519781top50table.html
4e88e0c17120106099cd5845c58fc17b33018d7b2549D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't
033ed67b22c71f0ed6fe66740a3e8f1ca7293e0d29670 top1000table.html.gz
ad9f37767dbdaf186e7028670c1fbe6763ffd3159765top50table.html
17064c0f17b9d83e4a82ce9e4564ce96d7fbbc1e2529D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't
a5ffd88331b1957d3560cacec11e9e9e219aa3d230052 top1000table.html.gz
0bd927f2ec8dbe88efd8152638fc4cadc58ac24d10804 top50table.html
1f8084ce6578d8559d8998fe928ad77b7f2bfcc52529D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't
75feab961dccdf1f89f498f1127cb24820d07e2829972 top1000table.html.gz
f8e6a492a33b28871730c6c61e51bf18cc556b0b10799 top50table.html
fa60f6104db7642535c289218499578ed2c3d0f12544D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't
2a8d8035e179ceab45aeb901c69003bd6089094029938 top1000table.html.gz
0bf2d12670f813def17ff312799a80dfa42556b210789 top50table.html
b560f460ec3350b76234b5b8267ff1e008ba76b02544D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't
3d48ed7719e6e0cf8f66d1876f10b80d90fa597029956 top1000table.html.gz
1bdfb1066ed3518180d95db17bc1dfa5d97d5c0010776 top50table.html
a34f50531c228cc99ac92985e754a7f907f247142544D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't
7e054a1b7d423bf4ead6425a252654eb0a9e40bd29874 top1000table.html.gz
9b6a0a0dbb6b85d7e951f228c1df6db0fa02f53b10776 top50table.html
83a3a2e3a1d33385b01706c729350d9606c19bc72544D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't
a9e02c0d2e37d042f79ca19580d0a8206b138abc29875 top1000table.html.gz
4f0864a9f27b28166cf4762ac61eb9d23257a10710776 top50table.html
ffb4922c1a83ead0d6316366e4e5485de5e2a7cb2544D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't
as with http? I don't know what
to do about this or even if I can do anything about this. I haven't
found any solution here or with google. Any hint greatly appreciated!
Thanks in advance!
Hopefully the admins of these servers will check their logs and reply.
--
Jason Harris | NIC: JH329
75f811cc1d420da4f4b9a6aea831835a82fac8c329977 top1000table.html.gz
cf55849b2ded63023a6bcff388da2d0823a902fc10779 top50table.html
dfc7fdf2deb3ddfb375ee811ce8c04715b0288b12544D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't
97f7c9c49dc802ccc296eabfb0f1f4227f65908f30049 top1000table.html.gz
7b167ed506954f3bfee1ebfa0d5dff67f21035c510771 top50table.html
756af2551f40f00819d79a522235b18f1d05f10f2544D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't
e506bb7f276b3ee43632998b19084211b9d2951e30083 top1000table.html.gz
a28e7f0cd5362b007604f00a1bdd3fca8005b99c10780 top50table.html
b1610820aa1e16cabf4b6e4f2e6c07aeb871f8b22514D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't
e506bb7f276b3ee43632998b19084211b9d2951e30083 top1000table.html.gz
a28e7f0cd5362b007604f00a1bdd3fca8005b99c10780 top50table.html
b1610820aa1e16cabf4b6e4f2e6c07aeb871f8b22514D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't
e506bb7f276b3ee43632998b19084211b9d2951e30083 top1000table.html.gz
a28e7f0cd5362b007604f00a1bdd3fca8005b99c10780 top50table.html
b1610820aa1e16cabf4b6e4f2e6c07aeb871f8b22514D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't
b337b7ed2195bcd6c0747ea19ac4032efc98348130190 top1000table.html.gz
f0255b1e1a0aef19b925b0cba8d2c9c8ba37551410789 top50table.html
3480e6c8561f512c476eb74f2d78d47701b2edb82554D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't
d52e1c405cb167e970f4475a4b9b9a9babd5b0ef30228 top1000table.html.gz
a54f6dd2ea497b7a0b5bad758c1e0a8a1d762e7610778 top50table.html
40b84290946d44d87126d31075da13027fe72b802534D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't
53b6f84a522ff51e50ca7aa464560068cbeeb28130145 top1000table.html.gz
a0b818d1dc685c364de317ca2adb4b094529faa610778 top50table.html
a93b13a379789fde934a552e5be01ea11034b8ff2514D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't
On Fri, Sep 09, 2005 at 08:31:35AM -0400, David Shaw wrote:
On Fri, Sep 09, 2005 at 12:22:00AM -0400, Jason Harris wrote:
[I'll address your other points later.]
If you insist on presenting a different view to users than the entire
rest of the keyserver net, without any way to turn
,
0xCA, 0x57, 0xAD, 0x7C};
if ((keyid.size == 8) (keyid.offset == 0)
(memcmp (keyid.data, gdkeyid, 8) == 0)) {
break;
}
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't it?
[EMAIL PROTECTED] _|_ web: http
On Thu, Sep 08, 2005 at 10:28:29PM -0400, David Shaw wrote:
On Thu, Sep 08, 2005 at 10:08:24PM -0400, Jason Harris wrote:
keyserver.kjsl.com is now stripping all GD sigs. The extra variable
in kd_search.c and code for 'case 2:' of make_keys_elem(), respectively:
It's your keyserver
d360f72be6186cbd44f0742793ff992e26cb7c2e30253 top1000table.html.gz
9e3e836b381fecfa38946c36cbf50a0e6f72413610789 top50table.html
a79f628ea931b2a47270ab827ec9e20dc95162052534D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't
On Thu, Aug 11, 2005 at 12:02:17PM -0400, Jason Harris wrote:
On Wed, Aug 10, 2005 at 10:30:09PM -0500, John Clizbe wrote:
Tracked down the two offending keys and deleted them with 1.4.1. They both
failed to import from a keyserver with 1.4.2 with the same mpi error, so I'm
marking it off
On Thu, Aug 04, 2005 at 07:54:09AM -0400, David Shaw wrote:
On Thu, Aug 04, 2005 at 12:24:27AM -0400, Jason Harris wrote:
Thus, in reality, the Expect: 100-continue header appears to be confusing
SKS (during POSTs).
Hmm. No really good way to fix that in GPG or curl since they can't
On Sat, Jul 30, 2005 at 09:28:28PM -0400, David Shaw wrote:
On Sat, Jul 30, 2005 at 02:20:35PM -0400, Jason Harris wrote:
Thought you'd get a kick out of that...
:)
Note that in the next release of GnuPG, --with-libcurl will be the
default. (So the more people who try it now, and report
, doesn't
at first succeed.
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't it?
[EMAIL PROTECTED] _|_ web: http://keyserver.kjsl.com/~jharris/
Got photons? (TM), (C) 2004
pgpzELgIB0rTb.pgp
Description: PGP signature
On Wed, Aug 03, 2005 at 08:44:18PM -0400, David Shaw wrote:
On Wed, Aug 03, 2005 at 08:18:35PM -0400, Jason Harris wrote:
Looking at http://curl.haxx.se/libcurl/c/curl_easy_setopt.html ,
this might do the trick:
curl_easy_setopt (..., CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4
(responsibly)!
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't it?
[EMAIL PROTECTED] _|_ web: http://keyserver.kjsl.com/~jharris/
Got photons? (TM), (C) 2004
pgpDoCZiY5UgE.pgp
Description: PGP signature
___
Gnupg-users
bee92bfedf809a5828365a840e00443f47465f6430298 top1000table.html.gz
9bdf18aeab3060ee7130f5b5aff0c2812756b76010865 top50table.html
203306fcd34c52e8d4787012466983dad7b758142534D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't
76a25f6578c0044a723ead174bce9e4a02d11a3c30101 top1000table.html.gz
32a420454f06a3d181233cc8c8239c3d2015808710895 top50table.html
c710731bd1ef697ba6db1a2436231303904af8ff2639D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't
6e685336416a71d4952b98dd910f99f63f7c166030382 top1000table.html.gz
c693ef22a86ab244e3120e7ebf151170ce61c71710890 top50table.html
27dfe522be1c9f7e8a604b10b72150a338c1e3ec2619D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't
from
a keyserver), and recreating and re-signing the userids will add another
selfsig to each, but (unless you can do surgery on secring.gpg) that can't
be helped now.
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't it?
[EMAIL PROTECTED] _|_ web: http
dannyj.dynip.com
hasn't synchronized for even longer (missing ~25000 keys).
(Fortunately, submitting keys/updates to either of these two servers
will email them to keyserver.kjsl.com (also subkey safe), which will
propagate them to the rest of the keyserver network (without photos).)
--
Jason Harris
f11f307dafccadbc1600e7b5748710ceaa922ebc30385 top1000table.html.gz
042d7e9d2f0465f4d1e7749812a2fbaeb928efef10898 top50table.html
fd0b8b62f5208b74a390d4fff01973db0698f2572429D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't
aborted the import.
(Out of curiosity, what do you plan to have GPG do with the keys
once they're imported?)
I often work with keys dumped straight from pks without doing a
gpg --import on them. You should be able to do the same with
SKS.
--
Jason Harris | NIC: JH329, PGP: This _is_
89eeec826d5e2923cfa8406942d2ddc5f098389230355 top1000table.html.gz
4f94061558602bbf7dfe999407f96af3022123e710946 top50table.html
d5ea1aa85c27442e0d87173d265f18aadc749f0f2429D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't
40501100f167072304086610ff4a6f7f0428ffc330349 top1000table.html.gz
b6ae7a04520091fac591d4c80dca9a6492a39be510946 top50table.html
08fb84a189b03da03cbbc2ce6b5ae97f3c3aa9692409D3/D39DA0E3
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't
On Sat, Mar 19, 2005 at 01:24:13AM -0500, David Shaw wrote:
On Sat, Mar 19, 2005 at 12:22:54AM -0500, Jason Harris wrote:
c) Always keep the latest (valid) signature from a given issuer, even if
it has expired.
Remember that the original thing that spawned this thread
of
1-Jan-2000 as valid and usable.
What are you arguing for?
The sig. of 1-Jan-2000 is valid and usable. It can only be ignored when
superceded.
Also, if multiple non-revocable sigs. exist, the latest (valid) one
supercedes all others, which can be safely removed.
--
Jason Harris
On Fri, Mar 18, 2005 at 02:37:33PM -0500, David Shaw wrote:
On Fri, Mar 18, 2005 at 02:06:46PM -0500, Jason Harris wrote:
My point is that once GPG sees a newer signature that overrides an
older one, it can safely remove the older one, in all cases, in the
interest of keeping keys clean
69 matches
Mail list logo