Discussion:
[Sks-devel] CNAMEs for sks pool
Fabian Santiago
2017-02-19 21:59:26 UTC
Permalink
may i ask, what are all of the CNAMEs for the pool? Thanks.

- - Fabian S.
Fabian Santiago
2017-02-20 00:26:24 UTC
Permalink
thanks.

On Sun, Feb 19, 2017 at 6:59 PM, Phil Pennock
Post by Fabian Santiago
may i ask, what are all of the CNAMEs for the pool? Thanks.
Nobody knows for sure. There can be arbitrary names.
https://bitbucket.org/skskeyserver/sks-keyserver/wiki/Peering
Beware that for port 11371 traffic, you must be able to handle
requests with any Host: header, for the various pools and CNAMEs which
exist, and you must accept requests with no User-Agent: header set, as
at least one major OpenPGP HKP client refuses to set a User-Agent
field when talking to keyservers.
You don't need to accept unknown names on ports 80/443.
https://www.sks-keyservers.net/overview-of-pools.php
and also "keys.gnupg.net", which points to one of those.
Other people can set up their own CNAMEs; Kristian's service is widely
used, including by gnupg.net, but not in any way especially privileged.
-Phil
Loading...