|
From: | Steffen Kaiser |
Subject: | Re: [Sks-devel] Deployment question about non-public server with oneway feed |
Date: | Wed, 27 Jun 2018 16:34:52 +0200 (CEST) |
User-agent: | Alpine 2.11 (DEB 23 2013-08-11) |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Wed, 27 Jun 2018, Hendrik Grewe wrote:
This Setup reminds me of a recently asked question on this ML: http://lists.nongnu.org/archive/html/sks-devel/2018-06/msg00032.html hope this helps
yes, http://lists.nongnu.org/archive/html/sks-devel/2018-06/msg00041.html states that: "Unless recon is enabled in both directions, the key delta will inevitably grow to the point that recon will fail."
That means, recon / gossip is not possible and updates via email is the only option left.
I don't know if I like the idea to start from scratch regularily, also mentioned in the thread. So I would pull the complete database once a week, add the local changes and swap the servers.
Thanks,
Am 27.06.2018 um 15:12 schrieb Steffen Kaiser:Hi, I have been asked to setup a local PGP key distribution, because some attendees are concered about SPAM harvesting and other things. One condition is to support WKD and a key server, because some clients use a key server only. Because most client software cannot query multiple key servers, I thought about a proxy, that merges the results of one local and one SKS server first, but found none. So I guess my only option is to setup a SKS server and: 1) ask, if someone would feed me oneway with updates, and 2) synchronize local uploads between WKD and this server. I installed a test machine and verified, that I can sync WKD and the database of the SKS server both ways. But: is this a valid setup? Would somebody recommend something different? Is it possible to setup a oneway SKS update feed? Kind regards, -- Steffen Kaiser _______________________________________________ Sks-devel mailing list address@hidden https://lists.nongnu.org/mailman/listinfo/sks-devel
- -- Steffen Kaiser
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEVAwUBWzOgjCOjcd6avHZPAQL5LQf+O1J9ZD8Pq+ZROCgPsdCqqqIIw2PtaJB2 yX006tcep+F/uLrXTg3C3rcVr3qIAJLzPL8p7a9acQvdC6yOfMCZx0gfbkoBEr34 q3MNmH6FWYqwuYfR1aBGGtSoROL6/9Ksgnb1fq8Ta3js9KHC+CRVxffgV3VO3/Dd Vb8zAGlYcizmSSn6uJL9RXOzp3AZ3bQA/eV6n47KehKMnAPV9+84XyVKTdB51FlO XrxTOgwLQyafSNVsuLIsGZIYBUFIYHCpQ4jbWxdSQLRGGAwykrbTB/MxaMpFH2Th bJKYMVoh+fUAjcen6edV9WXcgjyIRBcdJ9JrXtHQdKyHujTVlLGLtg== =jiKn -----END PGP SIGNATURE-----
[Prev in Thread] | Current Thread | [Next in Thread] |