Re: [Sks-devel] pool membership

[Michael Jones]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 03/10/16 21:44, Valentin Sundermann wrote:
>> However, my key server,
>>> keyserver.brian.minton.name, does not appear in the pool status
>>> page. Not even in the "Servers currently not in the pool"
>>> section.  I thought it would automatically show up.  Any
>>> thoughts?
> Your keyserver is on the exclusion list at Kristian's scanner[1].
> I think when somebody uploaded the cloned strong set to the
> keyserver network[2], it was your server which got hit with it. 
> These issues should be over and so I guess Kristian will remove you
> from this list when he reads it.
> 
> Best regards, Valentin

Interesting,

Would it be of any value to introduce rate limiting on my set? maybe
limit an ip after 100 new keys in 30 mins?

(Lots of southern europe isp's nat through a single ip), so whatever
the trigger limit it would have to be a high one. Once the initial
trigger is hit it would be able to either slow down or disable
uploading of keys from that ip for said time period.

Even coming over tor or another distributed network to spam the
service would cause a headache?

Is there any value in looking into this?

Or perhaps this would be more appropriate as a possible future feature
of the sks keyserver source?

Whatever the solution would need to be easily implemented on all peers.

Just some thoughts...

Kind Regards,
Mike
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJX8siVAAoJEOYwtpHNe8FmrQAH/iE0rsKLztModP7rnBd07C3e
PTppzo+WHRskyPrJ8AzAYeG9xvX4rQibYsjjX9+KHbZDx5D1p/q45icYivEnoxSy
Y3AaM5BfPI5Cw+MHwVgEhd13NvwQojRyjqp1XGOb4+Nu+dlf38ejuyLxK0/fDTkX
wgmbER7ItPVABZJPA7FgXH+sfJZyjl0U47BiaJ4pUMyUzXVUpHC7NkH3due84Ip8
QWmisJ15h2rKjSwQpLaB2QUlgwFcV3bywRcR4+K7MMC/sdmk2ugC4JFbxcq9qOjO
Qu8i/xRo4qRjok4EnbS5O188bUznccmTIwY6mNH70zOUHQv1BVm/eOjCvq8MDbY=
=ZV6l
-----END PGP SIGNATURE-----