About PGP Signing a File.

[Jeffrey F. Bloss]

Tony Arnold wrote:

> For example, my version of Seahorse talks to hkp://pgp.mit.edu:11371
> and ldap://keyserver.pgp.com but there are quite a few more.

From the FWIW department, the MIT and LDAP PGP keyservers are
broken. They'll mangle newer version keys and/or won't broadcast any
at all. The current rule of thumb is to stick with newer HKP protocol
servers, and use one of the random pool redirects like...

hkp://random.sks.keyserver.penguin.de


> Keyservers exchange there information, so you only need to publish to
> one of them and they should eventually end up on all the others.

Some do, some do not. In fact there's three main "networks" at present
which do not mirror each other because they speak different
keyserver "languages", and a considerable number of "lesser" servers
that only mirror with select partners, or not at all. The PGP key
servers are notorious for not broadcasting keys outside their little
"clique", and LDAP key servers in general don't mirror anything
with anybody. :(

Here's a link to David Ross' page that explains in a little more
detail, even though it's somewhat dated now. I'm not aware of any
up-to-the-minute stats on key servers. Sorry. Best thing is to keep
an eye on the GnuPG-Users mailing list like I do. :( 

http://www.rossde.com/PGP/pgp_keyserv.html

-- 
     _?_      Outside of a dog, a book is a man's best friend.
    (o o)         Inside of a dog, it's too dark to read.
-oOO-(_)--OOo------------------------------[ Groucho Marx ]---
                    http://wrench.homelinux.net/~jeff/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 892 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20070211/c83e9895/attachment.sig>