Bug #17528

Configure Schleuder lists to fetch keys from keys.openpgp.org

Added by zen 2020-03-16 18:31:34 . Updated 2020-04-10 19:31:21 .

Status:
Resolved
Priority:
Normal
Assignee:
groente
Category:
Infrastructure
Target version:
Start date:
Due date:
% Done:

100%

Feature Branch:
Type of work:
Sysadmin
Blueprint:

Starter:
Affected tool:
Deliverable for:

Description

Schleuder lists hosted by us currently use the SKS Keyservers pool to fetch/renew keys periodically. To prevent signature flooding attacks, we need to switch the keyserver to “keys.openpgp.org”.

We can also use their Onion service to limit infoleaks.

Subtasks

Related issues

Blocks Tails - Feature #13242: Core work: Sysadmin (Maintain our already existing services) Confirmed 2017-06-29

History

#1 Updated by intrigeri 2020-04-06 11:58:35

  • blocks Feature #13242: Core work: Sysadmin (Maintain our already existing services) added

#2 Updated by groente 2020-04-10 19:31:21

  • Status changed from Confirmed to Resolved
  • Assignee changed from Sysadmins to groente
  • % Done changed from 0 to 100

done