Re: [Sks-devel] simple DoS against SKS's HKP interface :/

[Daniel Kahn Gillmor]

On 03/21/2012 08:08 AM, Phil Pennock wrote:
> For nginx, if you listen on a port and only have one vhost, with no
> default_server, will all requests for that hostname go to this server
> spec?

I believe they will, yes.  keys.mayfirst.org is also known as 
zimmermann.mayfirst.org (and as zimmerman.mayfirst.org due to the 
orthographical difficulty of the name).  Using any of these names works 
with this config.

> I wonder if a "listen 192.0.2.1:11371 default_server;" approach would be
> slightly clearer about the intent, which is that the service be
> available on *all* Hostname: headers, to be able to serve in the pools?

Yes, that probably would have made the intent clearer.  Thanks for the 
suggestion!

        --dkg