Running a keyserver for the Verein :)

[Andre Heinecke]

Hi,

Thanks a lot for your work! It is great that we have a "reference server" now 
hosted by an independet entity. Even though it does not solve the keyserver 
problems I think that it helps.  E.g. in the future we could roll out 
attestation signatures with this server and filter out unattested signatures. 
Still keeping in mind that federation is a thing and that we don't want to 
give the authority of all OpenPGP keys to a single point of attack.

But, How to enter the current server?
The option:
keyserver  https://pubkeys.intevation.de/

Only reports "no valid OpenPGP Data found"
HKP / HKPS ports are closed.


I'm not a fan of the verein subdomain. It makes it longer and uglier, 
especially for non-germans speakers.

I still think "keys.gnupg.org" would be best. I don't really think that it is 
confusable with "keys.openpgp.net". OpenPGP is something different then GnuPG.

And having it close to keys.gnupg.net would also be fine. The .org is the 
Organisation (The Verein) the .net is the Keyserver Network. Very fitting.

On Wednesday 2 September 2020 17:37:54 CEST Bernhard Reiter wrote:
> * github sponsor programm can be used to give some money to
>   hockeypuck. (I've tried, but there are problems with them charging us.)
>   The verein could do this. I suggest 10-50 USD/month I think it would help
>   covering costs for the reference hockeypuck server.

This is indeed interesting, I'm more for 100$ / month for the corporate tier. 
Any opinions on this from others? I think its a good way to spend our money.

> * Do you have a pointer to the "spammed" pubkeys and signatures that
>   currently block pubkey transfer like the one from Kristian? (This
>   would go into the first blacklist.)

Well dkg's key, Patricks and Werners key were at least spammed afaik. I can't 
send you a weblink to them as I could not find one with the spam signatures 
(which is good :-) ) 

So we have to rely on someone else to give you pointers how to blacklist 
malicious stuff, sorry.

Best Regards,
Andre

-- 
GnuPG.com - a brand of g10 Code, the GnuPG experts.

g10 Code GmbH, Erkrath/Germany, AG Wuppertal HRB14459
GF Werner Koch, USt-Id DE215605608, www.g10code.com.

GnuPG e.V., Rochusstr. 44, D-40479 Düsseldorf.  VR 11482 Düsseldorf
Vorstand: W.Koch, B.Reiter, A.Heinecke        Mail: board at gnupg.org
Finanzamt D-Altstadt, St-Nr: 103/5923/1779.   Tel: +49-211-28010702