-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
Nick Bebout wrote:
The Fedora Infrastructure team is pleased to announce that keys.fedoraproject.org is now up and running as a GPG keyserver.
[...]
Web interface at http://keys.fedoraproject.org or https://keys.fedoraproject.org
If it's supposed to be accessible with both encrypted and unencrypted HTTP, then I think the lookup form should support both ways, like the add form does. Currently the lookup form is hardcoded to be submitted unencrypted, so all the spies can see who looks up which keys.
This query exposes a character encoding bug in the page title: https://keys.fedoraproject.org/pks/lookup?search=Rombobj%C3%B6rn&op=vind...
Björn Persson
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
On Tue, 3 Sep 2013 13:15:05 +0200 Björn Persson bjorn@xn--rombobjrn-67a.se wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
Nick Bebout wrote:
The Fedora Infrastructure team is pleased to announce that keys.fedoraproject.org is now up and running as a GPG keyserver.
[...]
Web interface at http://keys.fedoraproject.org or https://keys.fedoraproject.org
If it's supposed to be accessible with both encrypted and unencrypted HTTP, then I think the lookup form should support both ways, like the add form does. Currently the lookup form is hardcoded to be submitted unencrypted, so all the spies can see who looks up which keys.
This query exposes a character encoding bug in the page title: https://keys.fedoraproject.org/pks/lookup?search=Rombobj%C3%B6rn&op=vind...
Could you file a ticket in the Fedora infrastructure trac and we can get this fixed up?
Thanks.
kevin
Kevin Fenzi wrote:
Björn Persson bjorn@xn--rombobjrn-67a.se wrote:
Nick Bebout wrote:
The Fedora Infrastructure team is pleased to announce that keys.fedoraproject.org is now up and running as a GPG keyserver.
[...]
Web interface at http://keys.fedoraproject.org or https://keys.fedoraproject.org
If it's supposed to be accessible with both encrypted and unencrypted HTTP, then I think the lookup form should support both ways, like the add form does. Currently the lookup form is hardcoded to be submitted unencrypted, so all the spies can see who looks up which keys.
This query exposes a character encoding bug in the page title: https://keys.fedoraproject.org/pks/lookup?search=Rombobj%C3%B6rn&op=vind...
Could you file a ticket in the Fedora infrastructure trac and we can get this fixed up?
Two tickets filed.
Björn Persson