WKD v05: DNS problem when requesting pubkey

Werner Koch wk at gnupg.org
Fri Apr 6 16:16:11 CEST 2018

On Fri,  6 Apr 2018 09:44, bernhard at intevation.de said:

>  * for http is is a performance penalty

Nobody says that you need to do a SRV query for all http requests.

>  * if it to be implemented in http it had to be agreed in an 
>    (upcoming) standard for http

SRV records have nothing to do with http but are required for certain
other services.  Web browser do all kind of stuff meanwhile and thus I
see no reason not to allow access - for extension - to do a bit more
than AAAA and CNAME queries.

> For understandable reasons the do not implement general networking
> as it would violate their security model around the same origin policy.

Now, that is a pretty lame excuse.



#  Please read:  Daniel Ellsberg - The Doomsday Machine  #
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <https://lists.gnupg.org/pipermail/gnupg-devel/attachments/20180406/b82a6c3a/attachment.sig>

More information about the Gnupg-devel mailing list