Re: pgp keyservers

2024-07-22 Thread Randy Bush
>> very intentionally wearing my end luser hat, i did not find a simple >> hkps://entry to put in my `~/.gnupg/gpg.conf`. probably my fault. > > That’s a fair point and we’d be open to ideas on how to improve that > aspect to make it more accessible to end users, especially the less > technicall

Re: pgp keyservers

2024-07-22 Thread nanog
> On Jul 22, 2024, at 09:48, Randy Bush wrote: > > i did a mild descent through the links on that web page. > > very intentionally wearing my end luser hat, i did not find a simple > hkps://entry to put in my `~/.gnupg/gpg.conf`. probably my fault. > > randy That’s a fair point and we’d be op

Re: pgp keyservers

2024-07-22 Thread Randy Bush
> While the sks-keyservers.net domain and many of the old hostnames that > powered it are dead & gone, the actual SKS keyserver network does in > fact live on, complete with new & improved DOS mitigations and active > development of the underlying server software powering it, Hockeypuck. > More inf

Re: pgp keyservers

2024-07-22 Thread nanog
nanog.org wrote: > > Message: 15 > Date: Sun, 21 Jul 2024 20:23:43 -0400 > From: Matt Corallo mailto:na...@as397444.net>> > To: Randy Bush mailto:ra...@psg.com>>, North American Network > Operators' > Group mailto:nanog@nanog.org>> > Subject: Re: p

Re: pgp keyservers

2024-07-22 Thread Daniel Corbe
> On Jul 22, 2024, at 10:00, John Kristoff wrote: > > * https://keys.openpgp.org/ keys.openpgp.org is the only key server I’ve ever used, but I’m wondering if it’s one of the “hipster” key servers referred to earlier.

Re: pgp keyservers

2024-07-22 Thread John Kristoff
On Sun, 21 Jul 2024 16:25:17 -0700 Randy Bush wrote: > are there any old keyservers still working? or only the new hipster > ones? i tried three and no love The current version of the PGP/GnuPG doc hosted by FIRST.org lists the following additional servers you might try, and appear to be funct

Re: pgp keyservers

2024-07-21 Thread Matt Palmer
On Sun, Jul 21, 2024 at 08:29:06PM -0500, J. Hellenthal via NANOG wrote: > I hate to say it but I really think pgp could benefit from a blockchain > implementation keeping it distributed among peers versus its current status. Absent a description of exactly how what you're proposing meaningfully

Re: pgp keyservers

2024-07-21 Thread Neil Hanlon
On Sun, Jul 21, 2024, 18:31 J. Hellenthal via NANOG wrote: > > > On Jul 21, 2024, at 19:28, Randy Bush wrote: > >  > > I think the hipster thing to do now, though, is --auto-locate-key with > > the Web Key Distribution or the DNSSEC Key Distribution mechanism. > > > i have done wkd for a fair w

Re: pgp keyservers

2024-07-21 Thread J. Hellenthal via NANOG
> On Jul 21, 2024, at 19:28, Randy Bush wrote: > >  >> >> I think the hipster thing to do now, though, is --auto-locate-key with >> the Web Key Distribution or the DNSSEC Key Distribution mechanism. > > i have done wkd for a fair while. but some folk like to pull keyrings, > so i try to kee

Re: pgp keyservers

2024-07-21 Thread Randy Bush
> I think the hipster thing to do now, though, is --auto-locate-key with > the Web Key Distribution or the DNSSEC Key Distribution mechanism. i have done wkd for a fair while. but some folk like to pull keyrings, so i try to keep them updated. randy --- ra...@psg.com `gpg --locate-external-keys

Re: pgp keyservers

2024-07-21 Thread Matt Corallo
pgp.mit.edu has been sporadically available for me over the last while, but yea AFAIU sks-keyservers shut down after the DoS drama, as did most of the old servers in the pool. I believe keyserver.ubuntu.com generally works and doesn't strip all the signatures and whatnot off keys when they uplo

pgp keyservers

2024-07-21 Thread Randy Bush
are there any old keyservers still working? or only the new hipster ones? i tried three and no love hkps://pgp.mit.edu hkps://pgp.uni-mainz.de hkps://hkps.pool.sks-keyservers randy