keyserver

[Jason Harris]

On Wed, Mar 09, 2005 at 09:07:13PM -0500, David Shaw wrote:
> On Wed, Mar 09, 2005 at 04:43:18PM -0600, David T Kerns wrote:

> > I've set up a keyserver inside the corporate firewall and am hoping to have
> > that one system share keys with a public server.
> > My thoughts are I only have to configure one system to barrel through the
> > firewall rather than every user on every server in my network.
> > Certainly I'm not the first one to encounter this. Can anyone point me to
> > some documentation?
> 
> It depends on what kind of keyserver you have set up.  If it's the
> OpenLDAP sort, then they don't sync with other servers (except in the
> LDAP sense of sync - and there aren't any public servers that sync
> that way).  If it's SKS or PKS, then you can sync via email.

Actually, ldap://horowitz.surfnet.nl:11370 receives syncs. via email
and sends a nightly email with the day's updates.  (Of course, both
pgp.com keyservers remain unsynchronized.)  (Also, I think the older
software can sync. via sockets, but I don't know that it was ever
used to sync. surfnet.nl and pgp.com.)

As well, SKS does not require email connectivity for sync.
A few SKS servers are currently configured with no email peers, FWIW.

> Your best bet is to subscribe to the pgp-keyserver-folk list at:
> 
>    http://lists.alt.org/mailman/listinfo/pgp-keyserver-folk

That one's still broken.  See my first reply for the backup list URL.
(Don't worry, Thomas just posted the wrong URL too.  :)

-- 
Jason Harris           |  NIC:  JH329, PGP:  This _is_ PGP-signed, isn't it?
jharris at widomaker.com _|_ web:  http://keyserver.kjsl.com/~jharris/
          Got photons?   (TM), (C) 2004
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 309 bytes
Desc: not available
Url : /pipermail/attachments/20050309/57a91a5b/attachment.pgp