What Linux kernel configuration options are required by GPG for --refresh-keys?

Kristian Fiskerstrand kristian.fiskerstrand at sumptuouscapital.com
Fri May 15 16:52:20 CEST 2015


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 05/15/2015 04:20 PM, Daniel Bomar wrote:
> I verified this to be the case in Wireshark.  It's sending both A
> and AAAA queries for hostname vod.ohai.su (not sure how it got that
> from pool.sks-keyservers.net but whatever probably not relevant.)
> However it's only GPG that seems to do this.  If I ping either of
> those hostnames it sends only an A query.  Same for my web browser
> and all other traffic I observed.  It's only GPG that's trying to
> do these AAAA DNS queries.

just throwing this in here for the archive purpose, but you have
ipv4.pool.sks-keyservers.net that only servers A records (and the
opposite for IPv6 at ipv6.pool.) to use as mitigants if such
situations arise.

- -- 
- ----------------------------
Kristian Fiskerstrand
Blog: http://blog.sumptuouscapital.com
Twitter: @krifisk
- ----------------------------
Public OpenPGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net
fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3
- ----------------------------
Quidquid latine dictum sit, altum videtur.
Anything said in Latin sounds profound
-----BEGIN PGP SIGNATURE-----

iQEcBAEBCgAGBQJVVgggAAoJEP7VAChXwav6t1kH/iy6Wn7nuz/lJ4QQri9wdwsp
UcQEIPImVDfuVuGp75iqL6+QHJc9oLYv7KeBEiXv/thFvcBXaLORNzLDDDLrXYNP
N1rntOmJ+hGvY5fI+D62z5q1A4oQaGiIxv/xww7jC2CCUtUB42L6mOGxmyE2+6Zg
AfAtxjKn/Cj7Ydt8/UxmuhqAhj7bnnY15TYIdxETMmyPCNm2xCgOyEP6KzdjpFPe
9XYvmiaNUFi/aQRLeRXWk701vK8meH288BrzJ/XCclK4b3PRUBCYR5HezX0cJPDV
Tu+SGUD4sLZcFbejXvXgmvNMhmazIG0F2/fFFGvMCkJg5/lT83NmSTmaJ0vLjpQ=
=48rM
-----END PGP SIGNATURE-----



More information about the Gnupg-users mailing list