Announcing Fedora GPG Key Server - keys.fedoraproject.org

Björn Persson bjorn at xn--rombobjrn-67a.se
Tue Sep 3 11:15:05 UTC 2013


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Nick Bebout wrote:
> The Fedora Infrastructure team is pleased to announce that
> keys.fedoraproject.org is now up and running as a GPG keyserver.
[...]
> Web interface at http://keys.fedoraproject.org or
> https://keys.fedoraproject.org

If it's supposed to be accessible with both encrypted and unencrypted
HTTP, then I think the lookup form should support both ways, like the
add form does. Currently the lookup form is hardcoded to be submitted
unencrypted, so all the spies can see who looks up which keys.

This query exposes a character encoding bug in the page title:
https://keys.fedoraproject.org/pks/lookup?search=Rombobj%C3%B6rn&op=vindex

Björn Persson
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (GNU/Linux)
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=qbka
-----END PGP SIGNATURE-----


More information about the users mailing list