[Sks-devel] Clean Up key.ip6.li peerings

2014-05-02 Thread Christian Felsing
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello, due to periodic clean up of my membership file following peerings seems to be dead for a longer time: ice.mudshark.orgNot OK 2014-01-17 0 Unknown keyserver.cais.rnp.br Not OK not set

Re: [Sks-devel] Seeking peers for sks.static.lu

2014-05-02 Thread Tobias Frei
Hi, you might want to generate these statistics when the daemon starts: http://j.mp/sksinitstats Also, making the web interface available at port 80 might be nice. :-) Do you have a reverse proxy running in front of the HKP port (11371) already, too? I'm unable to find a Via: header.

Re: [Sks-devel] Fwd: CVE request: SKS non-persistent XSS

2014-05-02 Thread Kristian Fiskerstrand
Plerror is local logging and not passed to a web client On May 2, 2014 11:48 PM, Daniel Kahn Gillmor d...@fifthhorseman.net wrote: On 05/02/2014 07:35 AM, Kristian Fiskerstrand wrote: A non-persistent client-side cross-site scripting attack was reported against SKS[0] resulting from

Re: [Sks-devel] Fwd: CVE request: SKS non-persistent XSS

2014-05-02 Thread Daniel Kahn Gillmor
On 05/02/2014 06:24 PM, Kristian Fiskerstrand wrote: Plerror is local logging and not passed to a web client In that case, why use html_quote s for the arguments to plerror when handling Bad_request ? Thanks for such a quick response, --dkg signature.asc Description: OpenPGP digital

Re: [Sks-devel] Seeking peers for sks.static.lu

2014-05-02 Thread Martin A.
Hi, okay setup haproxy as reverse proxy :) also http://sks.static.lu is available on port 80... there are actually 3612701 Keys in the DB... -Martin On 02.05.2014 18:15, Tobias Frei wrote: Hi, you might want to generate these statistics when the daemon starts: http://j.mp/sksinitstats

Re: [Sks-devel] Seeking peers for sks.static.lu

2014-05-02 Thread benfell
Tobias Frei writes: The key will change (hopefully) soon, when GnuPG introduces ECC keys. I will then add some other new servers to my membership list, too. Of course, I will send an email to the list when my key changes. It's entirely too possible somebody knows something I don't, but I

Re: [Sks-devel] Seeking peers for sks.static.lu

2014-05-02 Thread Tobias Frei
Hi, thank you for the information - that's bad news to me. :( Assuming that GnuPG was dead, what would be the implications? What would be a good free replacement which also supports ECC (one day)? :/ Best regards, Tobias Frei Am 03.05.2014 01:55, schrieb benf...@parts-unknown.org: Tobias Frei