whimsical-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From ru...@apache.org
Subject [whimsy] branch master updated: [WHIMSY-274] Use keys.openpgp.org
Date Sun, 30 Jun 2019 01:41:09 GMT
This is an automated email from the ASF dual-hosted git repository.

rubys pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/whimsy.git


The following commit(s) were added to refs/heads/master by this push:
     new 780438f  [WHIMSY-274] Use keys.openpgp.org
     new 80add22  Merge pull request #69 from jvz/patch-2
780438f is described below

commit 780438f1967f3f475159b93f2e419c1b501f00ae
Author: Matt Sicker <boards@gmail.com>
AuthorDate: Sat Jun 29 20:38:41 2019 -0500

    [WHIMSY-274] Use keys.openpgp.org
    
    This changes the default keyserver to keys.openpgp.org which has protections against recently
exploited weaknesses in the current SKS pool.
---
 www/secretary/workbench/views/actions/check-signature.json.rb | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/www/secretary/workbench/views/actions/check-signature.json.rb b/www/secretary/workbench/views/actions/check-signature.json.rb
index 26f4dba..eb84a9d 100644
--- a/www/secretary/workbench/views/actions/check-signature.json.rb
+++ b/www/secretary/workbench/views/actions/check-signature.json.rb
@@ -6,7 +6,8 @@ ENV['GNUPGHOME'] = GNUPGHOME if GNUPGHOME
 
 #KEYSERVER = 'pgpkeys.mit.edu'
 # Perhaps also try keyserver.pgp.com
-KEYSERVERS = %w{hkps.pool.sks-keyservers.net keyserver.ubuntu.com pgpkeys.mit.edu}
+# see WHIMSY-274 for secure servers
+KEYSERVERS = %w{keys.openpgp.org}
 
 message = Mailbox.find(@message)
 


Mime
View raw message