Yes, keyserver.ubuntu.com seems to be working properly now.
http://sks-keyservers.net/status/ shows the canonical.com keyservers as
properly configured and operational. The keyserver.ubuntu.com
configuration and daily statistics look reasonable. The original
reporter's key seems to have propagated to other keyservers.
** Description changed:
The default keyserver in Kubuntu is keyserver.ubuntu.com. However, weeks
after updating a key's information to that server, the information has
still not propagated to pgp.mit.edu. (Complete synchronization should
occur every few hours.)
To see this:
- Compare the information on the two servers for the key 362912BB. You will
additional addresses associated with that key on the ubuntu server compared to
the addresses associated with the key on the MIT server.
+ Compare the information on the two servers for the key 362912B8. You will
additional addresses associated with that key on the ubuntu server compared to
the addresses associated with the key on the MIT server.
Or:
- Perform a search on the two servers for "ccc.oxon": the key 362912BB shows
up when keyserver.ubuntu.com is searched, but not when pgp.mit.edu is searched.
+ Perform a search on the two servers for "ccc.oxon": the key 362912B8 shows
up when keyserver.ubuntu.com is searched, but not when pgp.mit.edu is searched.
I am not sure whether to classify this as a security vulnerability. It
definitely IS a security vulnerability, but not to the OS per se, and
I'm not sure what criteria you use to flag something as a security
vulnerability (maybe those criteria should be linked somewhere on the
bug submission page). Working on the principle that it's better to err
on the side of caution, I will mark this as a security vulnerability; I
apologise in advance if this report does not meet your criteria.
** Changed in: ubuntu-website
Status: Confirmed => Fix Released
--
keyserver.ubuntu.com does not seem to synchronize with other important
keyservers (MIT in particular)
https://bugs.launchpad.net/bugs/180184
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
