Gentoo Archives: gentoo-dev

From: "Robin H. Johnson" <robbat2@g.o>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] Re: rejecting unsigned commits
Date: Fri, 25 Mar 2011 19:27:17
Message-Id: robbat2-20110325T184016-199253117Z@orbis-terrarum.net
In Reply to: Re: [gentoo-dev] Re: rejecting unsigned commits by Mike Frysinger
1 On Fri, Mar 25, 2011 at 02:36:14PM -0400, Mike Frysinger wrote:
2 > > To facilitate this, should we pick a preferred keyserver or two?  Devs
3 > > of course are welcome to use others also, but if we're going to check
4 > > for revocations, we should specify where devs should upload them to in
5 > > order to make sure they hit the tree/etc.
6 > >
7 > > The preference need not be strictly applied, but even though those
8 > > keyservers are supposed to talk to each other I've found that I get
9 > > fairly different results if I refresh against various ones.
10 > in practice, i think we've been requiring hkp://subkeys.pgp.net
11 Subkeys.pgp.net is a rotation that's been a bit buggy of late.
12 Of the 5 IPs in it right now:
13 - 2 respond to pings, but not connections
14 - 1 totally unreachable
15 - 2 that work, but have slightly different versions of my key.
16
17 The SKS rotation seems to be much better, and kingtaco was looking at
18 running an additional SKS instance within Gentoo as our offical key
19 point (also useful for speeding up fetching keys in verification).
20
21 x-hkp://pool.sks-keyservers.net
22 http://sks-keyservers.net/status/
23 http://sks-keyservers.net/overview-of-pools.php
24
25 --
26 Robin Hugh Johnson
27 Gentoo Linux: Developer, Trustee & Infrastructure Lead
28 E-Mail : robbat2@g.o
29 GnuPG FP : 11AC BA4F 4778 E3F6 E4ED F38E B27B 944E 3488 4E85

Replies

Subject Author
Re: [gentoo-dev] Re: rejecting unsigned commits "Andreas K. Huettel" <dilfridge@g.o>