Re: [Sks-devel] status page

[Simon Lange]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 
Am 18.04.2014 21:18, schrieb Martin Papik:
> On 04/18/2014 09:24 PM, Simon Lange wrote:
> > yesterday i learned i have to give up control who is using his
> > domain with my services. :/
>
> Please explain, I'm not aware of such a requirement and if there is
> such I would like to know about it so I can make informed decisions.

Ive been told that it is required to allow ALL incoming traffic to the
IP of my keyserver for port 11371 no matter what hostname is requested.
that would - of course - allow everyone on this planet to pinpoint his
FQDN to my server using my service.

usually i use hostname directives. e.g. keys.s-l-c.biz or keys.bundes.it
or (.*)pool.sks-keyservers.net
i prefer that because that way i can avoid that ppl use my services with
their fqdn i dont like (like raccists facists and other bad ppl).

i opened it temporaly so we are enlisted in the pool again. but in a
couple of days i close that door again allowing ONLY those fqdm who did
contact me before. so i got at least a minimum control who is using my
services with their fqdn and who not. ;)
in a couple of days the fqdn written above will work. others not.

>
> Thank you
>
> Martin

best regards

Simon

- -- 
________________________________________________________
Simon Lange Consulting  - Gaudystr. 6  - DE-10437 Berlin
Telefon: +49(0)30/89757206 Mobil: +49(0)151/22640160
- ----------------------------------------http://s-l-c.biz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (MingW32)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
 
iQEcBAEBAgAGBQJTUX7qAAoJELCfvQa91QO+bjEH/j+j1Y7EUXVNqkQrEi0QLOxt
6387q2q9LuC8c+Kpa4EgZJLB6Tpptedz31y+bq+hhN53qmoNy6a2mNV399MY0iDa
Sx5khJ7gd5713vJCNlGuiyfK4Hz4NdoHZPMyVKu/2B9p1Od4LHehukGNmCAAQDS5
LyNRMlqy9cMXz+YijLrL5gvZ597YML1fbA3aTottCfbm2AJGXiSBxYvZiL/apJvl
T24nDR60CndUEbsKp/O4IjZiBFQvZdVKjRxzik1ujx4ahUfcs1AFfWZrO6vORAlV
xVqWJJDAWns5Pdi/VmevWDS7H6HIo/onQ8ZuLHqqA7HRnQiTDdFPJgEzRi/QxMw=
=DV8h
-----END PGP SIGNATURE-----