Re: [Sks-devel] simple DoS against SKS's HKP interface :/

2012-03-25 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 26.03.2012 00:46, Daniel Kahn Gillmor wrote: > On 03/25/2012 05:53 PM, Kristian Fiskerstrand wrote: >> Did a few more changes[0] to speed up the IP lookup process, and >> included adding IPv6 for some subset pools (including the HA >> one) > > Hm,

Re: [Sks-devel] simple DoS against SKS's HKP interface :/

2012-03-25 Thread Daniel Kahn Gillmor
On 03/25/2012 05:53 PM, Kristian Fiskerstrand wrote: Did a few more changes[0] to speed up the IP lookup process, and included adding IPv6 for some subset pools (including the HA one) Hm, just looking for the regular IPv4 A records for the HA pool from different authoritative nameservers seems

Re: [Sks-devel] simple DoS against SKS's HKP interface :/

2012-03-25 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 21.03.2012 11:49, Phil Pennock wrote: > On 2012-03-19 at 21:11 +0100, Kristian Fiskerstrand wrote: >> Here you go! > >> Added ha.pool. The HTTP Server code is available at e.g. >> http://sks-keyservers.net/status/info/keys.kfwebs.net . Atm I'm >>

[Sks-devel] New server in Germany, looking for peers.

2012-03-25 Thread Dennis Herbrich
Hello everyone! A new SKS 1.1.2 keyserver is now running in southern Germany at http://keyserver.veloxis.de:11371 and :80, on IPv4 and IPv6, behind an nginx reverse proxy. It is supposed to be a long-term addition to the pool, and I'll need some peerings to get started. I'm currently running a wee

[Sks-devel] New server in Germany, looking for peers.

2012-03-25 Thread Dennis Herbrich
Hello everyone! A new SKS 1.1.2 keyserver is now running in southern Germany at http://keyserver.veloxis.de:11371 and :80, on IPv4 and IPv6, behind an nginx reverse proxy. It is supposed to be a long-term addition to the pool, and I'll need some peerings to get started. I'm currently running a wee

Re: [Sks-devel] Clocks, timers, PTree and wiki advice

2012-03-25 Thread Jeffrey Johnson
On Mar 25, 2012, at 2:07 AM, Phil Pennock wrote: > On 2012-03-24 at 21:08 -0400, Jeffrey Johnson wrote: >> I question the analysis (but not what is observed). > > I do too. I've no idea why this is happening, which is why the summary > is so vague. But I'm not an SKS developer. > > My best gu

Re: [Sks-devel] Clocks, timers, PTree and wiki advice

2012-03-25 Thread Christian Felsing
Am 24.03.2012 23:26, schrieb Phil Pennock: > Virtual Machine issues > > There are some issues with clock-keeping mechanisms in some virtual > machines (VMs) affecting the Berkeley DB used for PTrees; if the clock > resolution is too low, multiple entries occur at the same timestamp > and

Re: [Sks-devel] Clocks, timers, PTree and wiki advice

2012-03-25 Thread John Clizbe
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1,SHA256 Phil Pennock wrote: > On 2012-03-24 at 21:08 -0400, Jeffrey Johnson wrote: >> I question the analysis (but not what is observed). > > I do too. I've no idea why this is happening, which is why the summary > is so vague. But I'm not an SKS dev