On Sep 12, 2013, at 12:41 PM, John Clizbe <[email protected]> wrote:

> Signed PGP part
> Geoffrey Irving wrote:
> > On Sep 12, 2013, at 10:44 AM, John Clizbe <[email protected]> wrote:
> >> 
> >> I was going to reply on [sks-devel], but this is as good a place as
> >> any. The patch to wserver.ml is fairly straightforward. But I'm curious
> >> as to why wserver.mli was patched to remove the interface spec for 
> >> send_result.
> > 
> > That was just general paranoia about generic looking functions with open 
> > CORS interfaces.  It would be fine (better?) to leave it public, but if
> > so it needs to be documented so that some unsuspecting future user
> > doesn't copy and paste code for some other purpose and generate a
> > security hole.  I suppose I actually already wrote the required comment
> > in the .ml, so I probably should have just copied the comment to the
> > .mli.
> 
> OK, I left the interface spec as it was and just imported the patch against
> wserver.ml
> 
> >> BTW, I can probably give you keyserver.gingerbear.net and 
> >> sks.keyservers.net to test against
> > 
> > Awesome, thanks!  Let me know when I should give it a try.
> 
> Go ahead. Report buggy things at the gingerbear addr below

Works great, proxy server deleted.  Thanks so much!

Now I just need to figure out why openpgp.js signature validation is failing… 
(other thread).

Geoffrey

Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail

_______________________________________________

http://openpgpjs.org

Reply via email to