[Sks-devel] Peers for two additional SKS servers (Tokyo and London)

[Eric Germann]

Good morning,

I am looking for peers for two new SKS keyserver installations.

I am running SKS version 1.1.6, on sks-nrt.semperen.com and sks-lhr.semperen.com

The servers are physically located in Tokyo,JP and London,GB
The servers _have_ IPv6 connectivity.

I have loaded a keydump from sks-cmh.semperen.com, dated 2018-01-11 and sync’d 
it to the same server.

For operational issues, please contact me directly.

sks-nrt.semperen.com11370 # 
ekgermann@semperen.com0x89ED36B3515A211B639060A9E30D9B9B3EBFF1A1
sks-lhr.semperen.com11370 # 
ekgermann@semperen.com0x89ED36B3515A211B639060A9E30D9B9B3EBFF1A1


Thank you!

Eric Germann


signature.asc
Description: Message signed with OpenPGP
___
Sks-devel mailing list
Sks-devel@nongnu.org
https://lists.nongnu.org/mailman/listinfo/sks-devel

Re: [Sks-devel] Peers

[Andrew Gallagher]

> On 6 Apr 2017, at 23:13, Phil Pennock  wrote:
> 
> If the :11371 port is open to the world, to support roaming users, then
> you're going to end up in the public pools anyway.

Not quite true. You can avoid being added to the pools by intentionally failing 
one or more of the entry criteria. The safest (and easiest!) one to fail is the 
reverse proxy detection. You should always install a reverse proxy but if you 
don't configure the headers properly, the detector will think you didn't. Oops. 

A

___
Sks-devel mailing list
Sks-devel@nongnu.org
https://lists.nongnu.org/mailman/listinfo/sks-devel

Re: [Sks-devel] Peers

[Phil Pennock]

On 2017-04-05 at 23:30 +0200, Peter Sunde Kolmisoppi wrote:
> Setting up a keyserver and looking for peers!
> The machine is located in sweden and will be used for research and internal 
> pgp signing / checking, and not public facing.

If the :11371 port is open to the world, to support roaming users, then
you're going to end up in the public pools anyway.

Every keyserver exports its status on a special URL, including a list of
which services it peers with.  Anyone can then spider the mesh and build
lists of keyservers.  This is how sks-keyservers.net does it and that
pool is what keys.gnupg.net is aliased to.

So either you'll need to not allow :11371 outside your network, or
you'll need to arrange with pool operators to be manually excluded.  The
only pool operator I know of which is worth worrying about is
sks-keyservers.net.

-Phil

___
Sks-devel mailing list
Sks-devel@nongnu.org
https://lists.nongnu.org/mailman/listinfo/sks-devel

Re: [Sks-devel] Peers

[Andrew Gallagher]

On 06/04/17 09:37, Peter Sunde Kolmisoppi wrote:
> Hey guys,
> 
> thanks for that. Yeah, firewall holes for peers. The idea is (as I
> told Andrew already so sorry for repeating) to do some privacy for
> internal operations. We don’t want anyone we don’t know to be able
> to log the lookups of keys for privacy reasons. We might put up a
> public facing keyserver in the future but for now we’re also doing
> some research, so any peers that wants to help would be much
> appreciated. The more the merrier!

Just curious, did you consider using tor or is this not possible?

(I'll peer with you after all this, promise!)

Andrew.



signature.asc
Description: OpenPGP digital signature
___
Sks-devel mailing list
Sks-devel@nongnu.org
https://lists.nongnu.org/mailman/listinfo/sks-devel

Re: [Sks-devel] Peers

[Peter Sunde Kolmisoppi]

> On 6 Apr 2017, at 00:32, Fabian A. Santiago  
> wrote:
> 
> On April 5, 2017 6:08:05 PM EDT, Andrew Gallagher  wrote:
>> 
>>> On 5 Apr 2017, at 22:30, Peter Sunde Kolmisoppi 
>> wrote:
>>> 
>>> Hey all!
>>> 
>>> Setting up a keyserver and looking for peers!
>>> The machine is located in sweden and will be used for research and
>> internal pgp signing / checking, and not public facing.
>> 
>> Out of curiosity, how are you going to recon if it's not public facing?
>> Specific firewall holes for your peers?
>> 
>> A
>> 
>> ___
>> Sks-devel mailing list
>> Sks-devel@nongnu.org
>> https://lists.nongnu.org/mailman/listinfo/sks-devel
> 
> Agreed, how? I'd peer with you but curious….

Hey guys,

thanks for that. Yeah, firewall holes for peers. The idea is (as I told Andrew 
already so sorry for repeating) to do some privacy for internal operations. We 
don’t want anyone we don’t know to be able to log the lookups of keys for 
privacy reasons.
We might put up a public facing keyserver in the future but for now we’re also 
doing some research, so any peers that wants to help would be much appreciated. 
The more the merrier!

Best,
Peter


signature.asc
Description: Message signed with OpenPGP
___
Sks-devel mailing list
Sks-devel@nongnu.org
https://lists.nongnu.org/mailman/listinfo/sks-devel

Re: [Sks-devel] Peers

[Fabian A. Santiago]

On April 5, 2017 6:08:05 PM EDT, Andrew Gallagher  wrote:
>
>> On 5 Apr 2017, at 22:30, Peter Sunde Kolmisoppi 
>wrote:
>> 
>> Hey all!
>> 
>> Setting up a keyserver and looking for peers!
>> The machine is located in sweden and will be used for research and
>internal pgp signing / checking, and not public facing.
>
>Out of curiosity, how are you going to recon if it's not public facing?
>Specific firewall holes for your peers?
>
>A
>
>___
>Sks-devel mailing list
>Sks-devel@nongnu.org
>https://lists.nongnu.org/mailman/listinfo/sks-devel

Agreed, how? I'd peer with you but curious
-- 
Thanks.
Fabian S.

signature.asc
Description: PGP signature
___
Sks-devel mailing list
Sks-devel@nongnu.org
https://lists.nongnu.org/mailman/listinfo/sks-devel

Re: [Sks-devel] Peers

[Andrew Gallagher]

> On 5 Apr 2017, at 22:30, Peter Sunde Kolmisoppi  wrote:
> 
> Hey all!
> 
> Setting up a keyserver and looking for peers!
> The machine is located in sweden and will be used for research and internal 
> pgp signing / checking, and not public facing.

Out of curiosity, how are you going to recon if it's not public facing? 
Specific firewall holes for your peers?

A

___
Sks-devel mailing list
Sks-devel@nongnu.org
https://lists.nongnu.org/mailman/listinfo/sks-devel

[Sks-devel] Peers

[Peter Sunde Kolmisoppi]

Hey all!

Setting up a keyserver and looking for peers!
The machine is located in sweden and will be used for research and internal pgp 
signing / checking, and not public facing.

Best regards,
Peter


signature.asc
Description: Message signed with OpenPGP
___
Sks-devel mailing list
Sks-devel@nongnu.org
https://lists.nongnu.org/mailman/listinfo/sks-devel

[Sks-devel] Peers for keys.fedoraproject.org

[Nick Bebout]

Anyone that wants to peer with keys.fedoraproject.org, please add us to
your membership file and send me the line to put in our membership file.

keys.fedoraproject.org 11370 # sysadmin-keys-memb...@fedoraproject.org
(Nick Bebout)
___
Sks-devel mailing list
Sks-devel@nongnu.org
https://lists.nongnu.org/mailman/listinfo/sks-devel

Re: [Sks-devel] peers

[Michael Jones]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Hi,

anyone willing to peer in Eu (Server in france).

Kind Regards,
Mike
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJWQUiRAAoJEOYwtpHNe8FmY38H/R0u+zAwnefNi9OsjJE2JEnp
LBPlZAyo1CyADk67PvmAUBXfD2fgfp/+DOnlDwbZ+4KPx1cXwcQRZjAME4uWxr2j
1cV9pIdeV22BByekKw2C3vT9+UFRkbeT+cU1WnzPpLzcQaMAhGwhUGuXkN9WxbTI
njW7GUmI5V9yvF/kl7xHl6jTMGmPwW93sCioUR7iX+N6Ir9zf2PRzfTNhi9n7jcq
OxFAEC+kJxTS7GLZtrtuMHRmD4T16567tAlz+AvSouqEJK4yiZgMiezew7G8HvNW
4vLGt7r/y5XHhwrhGycgP13i0HiGarbH1fN21t3F2OMsRopwOPjc3/FJkOT0fpw=
=8+7I
-END PGP SIGNATURE-

___
Sks-devel mailing list
Sks-devel@nongnu.org
https://lists.nongnu.org/mailman/listinfo/sks-devel

Re: [Sks-devel] Peers required/offerred

[Timothy Holtzen]

Dan,
I've added your info to our membership file.  Please add us to yours.

gpg.NebrWesleyan.edu 11370 # Timothy A. Holtzen t...@nebrwesleyan.edu 
0xDABCB3D7


Timothy A. Holtzen
Campus Network Administrator
Nebraska Wesleyan University
Public PGP key 0xDABCB3D7


On 02/06/2012 05:26 PM, Daniel Austin wrote:
 Dear List,

 I've setup a new SKS keyserver, and i'm happy to peer with any other
 servers who are interested.
 I'm using a hostname I acquired long ago that's very fitting for the job.
 The server is hosted on a fast, stable server with excellent
 connectivity (both IPv4 and native IPv6 reachable)

 If you'd like to peer, please add me to your 'membership' file with
 the following data, and let me know your details so I can do the same
 here:

 pgpkeys.co.uk 11370 # Daniel Austin dan...@kewlio.net 0x7F003DE6



 Thanks,

 Dan.


 ___
 Sks-devel mailing list
 Sks-devel@nongnu.org
 https://lists.nongnu.org/mailman/listinfo/sks-devel


signature.asc
Description: OpenPGP digital signature
___
Sks-devel mailing list
Sks-devel@nongnu.org
https://lists.nongnu.org/mailman/listinfo/sks-devel

[Sks-devel] Peers required/offerred

[Daniel Austin]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Dear List,

I've setup a new SKS keyserver, and i'm happy to peer with any other servers 
who are interested.
I'm using a hostname I acquired long ago that's very fitting for the job.
The server is hosted on a fast, stable server with excellent connectivity (both 
IPv4 and native IPv6 reachable)

If you'd like to peer, please add me to your 'membership' file with the 
following data, and let me know your details so I can do the same here:

pgpkeys.co.uk 11370 # Daniel Austin dan...@kewlio.net 0x7F003DE6



Thanks,

Dan.

-BEGIN PGP SIGNATURE-
Version: PGP Desktop 10.1.2 (Build 9)
Comment: https://www.dan.me.uk/
Charset: utf-8

wj8DBQFPMN4EuHpKuX8APeYRAmaNAKCoNrLK5CBDqMoG14oC2k56LpzS8gCfaLo/
8p52SG7kMoWfAxUYWpfat9k=
=sZIW
-END PGP SIGNATURE-

___
Sks-devel mailing list
Sks-devel@nongnu.org
https://lists.nongnu.org/mailman/listinfo/sks-devel

Re: [Sks-devel] Peers required/offerred

[Kristian Fiskerstrand]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Daniel Austin wrote, On 02/07/2012 09:17 AM:
 pgpkeys.co.uk 11370 # Daniel Austin 
 dan...@kewlio.net 0x7F003DE6

Hi Daniel,

I've added you to the membership file of keys2.kfwebs.net
keys2.kfwebs.net 11370 # 0x6b0b9508

- -- 
- 
Kristian Fiskerstrand
kristian.fiskerstr...@sumptuouscapital.com
http://www.sumptuouscapital.com
Twitter: @krifisk
- 
Manus manum lavat
One hand washes the other
- 
This email was digitally signed using the OpenPGP
standard. If you want to read more about this
The book: Sending Emails - The Safe Way: An
introduction to OpenPGP security is now
available in both Amazon Kindle and Paperback
format at
http://www.amazon.com/dp/B006RSG1S4/
- 
Public PGP key 0xE3EDFAE3 at http://www.sumptuouscapital.com/pgp/
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.14 (GNU/Linux)
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=VaUl
-END PGP SIGNATURE-


___
Sks-devel mailing list
Sks-devel@nongnu.org
https://lists.nongnu.org/mailman/listinfo/sks-devel

[Sks-devel] Peers requested for cryptochan.org - IPv4/IPv6 server.

[oakwhiz]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Hello everyone,

After many hours of repeatedly building the database, I have finally
obtained a working one.
I have set up a keyserver at cryptochan.org with both IPv4 and IPv6 addresses.
We're looking for a couple of reciprocal peers for this server.

The server's IP addresses are:
205.185.125.186
2607:f358:1:fed5:5:0:1438:2

You can add the following line to your membership file:

cryptochan.org 11370 # oakw...@minousoft.com  0x18EEDFD7


Thanks,
oakwhiz

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.11 (GNU/Linux)
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=d9cJ
-END PGP SIGNATURE-

___
Sks-devel mailing list
Sks-devel@nongnu.org
https://lists.nongnu.org/mailman/listinfo/sks-devel