Re: [Sks-devel] status page

[Simon Lange]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 
Am 18.04.2014 22:10, schrieb Martin Papik:
> Answering ALL host names just makes you willing to participate in any
> pool by default, without extra maintenance. But again, AFAIK this
> isn't a requirement. Am I misinformed?

https://twitter.com/krifisk/status/456717051340791808
"With a HTTP Host header not belonging to the specific hostname? Note
the -H 'Host.....' , 11371 should allow ALL traffic through"

>
> How would bad people benefit from your key-server responding to
> http://very.bad.com:11731/ anyway?

"bad ppl" could pretend offering a public service using my machines they
dont own nor they administre nor they run. my machines would support
that passivly. think this is easy to understand. and also has some legal
implications. just imagine feds want to seize all machines of some "bad
ppl"and pinpoint using the IPs the get from running services under
badppl's domains... not worth the risk while easy to avoid.
we dont gossip with everyone without "handshaking" first. i keep it that
way same with the pool. :)

>
> Does lighthttpd (which you seem to be using) expose some kind of a
> forward proxy?

only if i ask him to. ;) if i run him transparently the
pool-check-script fails and says that i dont run a reverse proxy. ;)

>
> Martin
Simon

- -- 
________________________________________________________
Simon Lange Consulting  - Gaudystr. 6  - DE-10437 Berlin
Telefon: +49(0)30/89757206 Mobil: +49(0)151/22640160
- ----------------------------------------http://s-l-c.biz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (MingW32)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
 
iQEcBAEBAgAGBQJTUY4/AAoJELCfvQa91QO+KyEH/iOzvCXkYlkAbyz8vZP4e6xm
eSI8wvt+F8KDh/zdgw8Dk5iw2cEMOqYrob/JwmrvSXML+mpipIbUE5r0zXNy25PB
kkxQOxbvkM6btJSQA+tkvRNJMlT/RDLuJySSGIMumUAcNQJVfqySWHaqxw2YhEol
daEDjfNzMxnxj+QCdDKf8zNtQUhqkcqSEdRRyhyZVtnmsOQopmngRZSNGVil8ipV
NCXc6Oo0X6ghwPXtgtkczK91/2Po5lfTfqsBXBVAH4XJvrE0JQnhGo5RL7/sZ0MY
ECZMPS6DEHwbo5hpqoqsINheCYpC6yiQyazCUwxURHvqdNwbt7XXGpePluEJIZM=
=1kAW
-----END PGP SIGNATURE-----