Re: [Sks-devel] Reverse Proxy

[Kristian Fiskerstrand]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 29.04.2012 00:58, Daniel Kahn Gillmor wrote:
> On 04/28/2012 09:26 AM, Jens Leinenbach wrote:
> 
> 
> I do not recommend exposing SKS directly on port 11372, since that
> would mean leaving yourself exposed directly to the same DoS attack
> that the reverse proxies are intended to buffer against.
> 

This can easily be firewall-protected to only allow the peers, though.
(hence "that is allowed access only by your peer list")

- -- 
- ----------------------------
Kristian Fiskerstrand
http://www.sumptuouscapital.com
Twitter: @krifisk
- ----------------------------
Corruptissima re publica plurimæ leges
The greater the degeneration of the republic, the more of its laws
- ----------------------------
This email was digitally signed using the OpenPGP
standard. If you want to read more about this
The book: Sending Emails - The Safe Way: An
introduction to OpenPGP security is now
available in both Amazon Kindle and Paperback
format at
http://www.amazon.com/dp/B006RSG1S4/
- ----------------------------
Public PGP key 0xE3EDFAE3 at http://www.sumptuouscapital.com/pgp/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=1J2K
-----END PGP SIGNATURE-----