Re: [Sks-devel] Heartbleed ans HKPS pool

[Dmitry Yu Okunev (pks.mephi.ru)]

Hello.

On 05/25/2014 12:00 AM, Kristian Fiskerstrand wrote:
> On 05/24/2014 08:32 AM, Gabor Kiss wrote:
>> On Wed, 9 Apr 2014, address@hidden
>> wrote:
> 
>>> You are quite correct, and I will revoke and issue new
>>> certificates as I get CSRs signed with the same openpgp keys that
>>> I originally got requests from.
> 
>> Dear Kristian,
> 
>> Please consider to remove vulnerable servers from HKPS pool. This
>> is not a cosmetic problem like SKS version number but much
>> serious. Some guys promise secure channel for communication but 
>> this is everything but secure.
> 
> 
> I'll consider this once we reach the grace-period timeout (i.e.
> revoking any certs that haven't been updated that seems vulnerable)

BTW, is it right that our server is not in the HKPS pool
"hkps.pool.sks-keyservers.net".

Server: keyserver.ut.mephi.ru (85.143.112.59)

$ host hkps.pool.sks-keyservers.net
hkps.pool.sks-keyservers.net has address 162.243.102.241
hkps.pool.sks-keyservers.net has address 176.9.51.79
hkps.pool.sks-keyservers.net has address 192.71.151.126
hkps.pool.sks-keyservers.net has address 192.146.137.11
hkps.pool.sks-keyservers.net has address 212.12.48.27
hkps.pool.sks-keyservers.net has address 216.66.15.2
hkps.pool.sks-keyservers.net has address 46.4.212.178
hkps.pool.sks-keyservers.net has address 46.229.47.140
hkps.pool.sks-keyservers.net has address 85.10.205.199
hkps.pool.sks-keyservers.net has address 89.68.150.88
hkps.pool.sks-keyservers.net has IPv6 address 2001:6f8:124e::1
hkps.pool.sks-keyservers.net has IPv6 address 2a01:4f8:a0:4024::2:0
hkps.pool.sks-keyservers.net has IPv6 address 2a01:4f8:131:149::f2
hkps.pool.sks-keyservers.net has IPv6 address 2a01:4f8:150:7142::2
hkps.pool.sks-keyservers.net has IPv6 address 2001:470:1:116::6
hkps.pool.sks-keyservers.net has IPv6 address 2001:470:1f09:325::94
hkps.pool.sks-keyservers.net has IPv6 address 2001:67c:26b4::2c6b


-- 
Best regards, Dmitry,
head of UNIX-tech department NRNU MEPhI,
tel. 8 (495) 788-56-99, add. 8255

signature.asc
Description: OpenPGP digital signature