After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 645995 - please remove all reference to pgp.mit.edu as a keyserver. it is out of date
please remove all reference to pgp.mit.edu as a keyserver. it is out of date
Status: RESOLVED FIXED
Product: seahorse
Classification: Applications
Component: general
unspecified
Other Linux
: Normal normal
: 2.26.0
Assigned To: Seahorse Maintainer
Seahorse Maintainer
Depends on:
Blocks:
 
 
Reported: 2011-03-28 18:29 UTC by Daniel Kahn Gillmor
Modified: 2011-03-29 11:31 UTC
See Also:
GNOME target: ---
GNOME version: ---



Description Daniel Kahn Gillmor 2011-03-28 18:29:58 UTC
seahorse and its plugins and translations contain many references to pgp.mit.edu.  However, pgp.mit.edu is out of date and does not sync with the modern keyserver pool [0].  As a result, users of seahorse do not get OpenPGP expiration updates, and they do not receive notices of revocation.  This is dangerous, because it means users are stuck with out-dated information, and might be willing to accept a key long after it has been declared revoked by the keyholder.

If you are going to pre-seed a default keyserver, please use something like pool.sks-keyservers.net [1], which is at least maintained by an active community.

[0] http://lists.gnupg.org/pipermail/gnupg-users/2010-November/039782.html
[1] http://sks-keyservers.net/
Comment 1 Stef Walter 2011-03-29 11:31:07 UTC
Done. Committed change to seahorse 'master' branch. Please check that this is correct and functions as expected.

commit 1da34ac91defd55764426155187fe69996aaed36
Author: Stef Walter <stefw@collabora.co.uk>
Date:   Tue Mar 29 13:19:38 2011 +0200

    Use pool.sks-keyservers.net instead of pgp.mit.edu
    
    https://bugzilla.gnome.org/show_bug.cgi?id=645995