gpg 2.1.15, *no* keyservers found for submit/recv, "DNS query returned an error or no records: No such domain (nxdomain)"
Kristian Fiskerstrand
kristian.fiskerstrand at sumptuouscapital.com
Thu Oct 13 00:07:07 CEST 2016
[Sent from my iPad, as it is not a secured device there are no cryptographic keys on this device, meaning this message is sent without an OpenPGP signature. In general you should *not* rely on any information sent over such an unsecure channel, if you find any information controversial or un-expected send a response and request a signed confirmation]
>
>
> Kristian, are you expecting the SRV records to be published at this
> point in the DNS?
>
Well, seems SRV records are causing more issues than they are useful. They only ever make sense for the geographical sub-pools in order to distributed the traffic using weights there, for the rest of the pools they are a noop since allowing specific ports etc is a bad idea overall.
This is further complicated by gnupg 2.1 using _hkp , whereby the consensus in previous implementation has been _pgpkey-http._tcp. So where SRV is implementere it is using the original identifier.
Not having SRV should certainly not result in failure of operation when A and AAAA records are returned though..
More information about the Gnupg-devel
mailing list