Re: [Sks-devel] Heartbleed ans HKPS pool

[Daniel Kahn Gillmor]

On 05/27/2014 09:27 AM, Dmitry Yu Okunev (pks.mephi.ru) wrote:
> BTW, is it right that our server is not in the HKPS pool
> "hkps.pool.sks-keyservers.net".
> 
> Server: keyserver.ut.mephi.ru (85.143.112.59)
> 
> $ host hkps.pool.sks-keyservers.net
> hkps.pool.sks-keyservers.net has address 162.243.102.241
> hkps.pool.sks-keyservers.net has address 176.9.51.79
> hkps.pool.sks-keyservers.net has address 192.71.151.126
> hkps.pool.sks-keyservers.net has address 192.146.137.11
> hkps.pool.sks-keyservers.net has address 212.12.48.27
> hkps.pool.sks-keyservers.net has address 216.66.15.2
> hkps.pool.sks-keyservers.net has address 46.4.212.178
> hkps.pool.sks-keyservers.net has address 46.229.47.140
> hkps.pool.sks-keyservers.net has address 85.10.205.199
> hkps.pool.sks-keyservers.net has address 89.68.150.88
> hkps.pool.sks-keyservers.net has IPv6 address 2001:6f8:124e::1
> hkps.pool.sks-keyservers.net has IPv6 address 2a01:4f8:a0:4024::2:0
> hkps.pool.sks-keyservers.net has IPv6 address 2a01:4f8:131:149::f2
> hkps.pool.sks-keyservers.net has IPv6 address 2a01:4f8:150:7142::2
> hkps.pool.sks-keyservers.net has IPv6 address 2001:470:1:116::6
> hkps.pool.sks-keyservers.net has IPv6 address 2001:470:1f09:325::94
> hkps.pool.sks-keyservers.net has IPv6 address 2001:67c:26b4::2c6b


the "host" command just looks things up in the DNS.  the DNS round-robin
arrangement only publishes a limited number of records of any given time
(10, maybe?) -- if there are more, they will be served randomly on
future requests.

To check the inclusion of your server in the hkps pool, look at the HKPS
column of:

 https://sks-keyservers.net/status/

        --dkg

signature.asc
Description: OpenPGP digital signature