Re: [Sks-devel] Heartbleed ans HKPS pool

[Kristian Fiskerstrand]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 05/24/2014 08:32 AM, Gabor Kiss wrote:
> On Wed, 9 Apr 2014, address@hidden
> wrote:
> 
>> You are quite correct, and I will revoke and issue new
>> certificates as I get CSRs signed with the same openpgp keys that
>> I originally got requests from.
> 
> Dear Kristian,
> 
> Please consider to remove vulnerable servers from HKPS pool. This
> is not a cosmetic problem like SKS version number but much
> serious. Some guys promise secure channel for communication but 
> this is everything but secure.
> 

I'll consider this once we reach the grace-period timeout (i.e.
revoking any certs that haven't been updated that seems vulnerable)


- -- 
- ----------------------------
Kristian Fiskerstrand
Blog: http://blog.sumptuouscapital.com
Twitter: @krifisk
- ----------------------------
Public PGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net
fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3
- ----------------------------
"Great things are not accomplished by those who yield to trends and
fads and popular opinion."
(Jack Kerouac)
-----BEGIN PGP SIGNATURE-----

iQIcBAEBCgAGBQJTgPpWAAoJEPw7F94F4Tagm8oP/R4QoZYNwju0P6/4pFtmeYTs
OUIQfzr8lviHZwCzcUDJWIinqdCICTIFfG0GQ/RB3PJ982GzKzs1JtzLMGWUHyaz
5ZxX8QC0ISRwO8T/08KC3X3NzlcrgyS+HfmJUlxXmjWG+N8XZIICEzAX/JkrFyFw
7mfJZ7t13CVxWbXw0VmopLuMhY8LTy1Fgi9KQMn+vhyf6gmBRzvjabXeotiac+XN
tbRq3rFXyFJgHuZ8i9OarkzlwjU+pqx24C4/JHJScfNq8XHXFh1EPND8LSAcBmel
mIlTE+vlx75NHfFGZZnu8ugJd9d+hwbeWAsCAKR5tYzv2mgSNNeqIB3ZuRyaSPUw
xgVECVpV6AAd+yzgBw85pOarXxQuqYNv7qWWg3OvFVl2qer2lrPyVbsk0yFgPpoo
F66BB7bqlZdWLECpiI7VafmqHpjFmnmqKfsruq74Jscvis+cdk01fHXsxBU8hFpL
gSHBRED7Va7YrgwxcBGr8hAIMZHdQElpBz+kYd0n6LibNHVZdT9e2fWhZCICPAuH
RVmXo/CKRXU+mCSuHjANFSCvKWSWUQZnuWZS9RLkm0veNu10pZJKo/9wWcyCkUaQ
g5R38JqHL0SOboXq1Jf4M3AbC5R5dQkhCi+RiVN8wo1wk+MqkldX135Yjd1UtJDt
J0VHQKCtbNrhexvh/jed
=yOpF
-----END PGP SIGNATURE-----