Re: [Sks-devel] Deployment question about non-public server with oneway feed

[Steffen Kaiser]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wed, 27 Jun 2018, Hendrik Grewe wrote:

> This Setup reminds me of a recently asked question on this ML:
>
> http://lists.nongnu.org/archive/html/sks-devel/2018-06/msg00032.html
>
> hope this helps

yes, http://lists.nongnu.org/archive/html/sks-devel/2018-06/msg00041.html 
states that: "Unless recon is enabled in both directions, the key delta 
will inevitably grow to the point that recon will fail."

That means, recon / gossip is not possible and updates via email is the 
only option left.

I don't know if I like the idea to start from scratch regularily, also 
mentioned in the thread. So I would pull the complete database once a 
week, add the local changes and swap the servers.

Thanks,

> Am 27.06.2018 um 15:12 schrieb Steffen Kaiser:
> > Hi,
> >
> > I have been asked to setup a local PGP key distribution, because some
> > attendees are concered about SPAM harvesting and other things. One
> > condition is to support WKD and a key server, because some clients use a
> > key server only.
> >
> > Because most client software cannot query multiple key servers, I
> > thought about a proxy, that merges the results of one local and one SKS
> > server first, but found none.
> >
> > So I guess my only option is to setup a SKS server and:
> >
> > 1) ask, if someone would feed me oneway with updates, and
> > 2) synchronize local uploads between WKD and this server.
> >
> > I installed a test machine and verified, that I can sync WKD and the
> > database of the SKS server both ways.
> >
> > But: is this a valid setup? Would somebody recommend something different?
> >
> > Is it possible to setup a oneway SKS update feed?
> >
> > Kind regards,
> >
> > -- Steffen Kaiser
> >
> > _______________________________________________
> > Sks-devel mailing list
> > address@hidden
> > https://lists.nongnu.org/mailman/listinfo/sks-devel

- -- 
Steffen Kaiser
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEVAwUBWzOgjCOjcd6avHZPAQL5LQf+O1J9ZD8Pq+ZROCgPsdCqqqIIw2PtaJB2
yX006tcep+F/uLrXTg3C3rcVr3qIAJLzPL8p7a9acQvdC6yOfMCZx0gfbkoBEr34
q3MNmH6FWYqwuYfR1aBGGtSoROL6/9Ksgnb1fq8Ta3js9KHC+CRVxffgV3VO3/Dd
Vb8zAGlYcizmSSn6uJL9RXOzp3AZ3bQA/eV6n47KehKMnAPV9+84XyVKTdB51FlO
XrxTOgwLQyafSNVsuLIsGZIYBUFIYHCpQ4jbWxdSQLRGGAwykrbTB/MxaMpFH2Th
bJKYMVoh+fUAjcen6edV9WXcgjyIRBcdJ9JrXtHQdKyHujTVlLGLtg==
=jiKn
-----END PGP SIGNATURE-----