Dev/apt-revoker

From Kicksecure
< Dev
Revision as of 00:48, 17 December 2016 by imported>Patrick (→‎unsorted)
Jump to navigation Jump to search

Materials

UNFINISHED (barely started)

Materials - pieces of information and links that should be included in the draft.

unsorted

keyserver discussion

reread this whole thread https://lists.nongnu.org/archive/html/sks-devel/2013-12/threads.html#00073archive.org iconarchive.today icon

find and reread this discussion

https://lists.nongnu.org/archive/html/sks-devel/2013-12/msg00075.htmlarchive.org iconarchive.today icon

>> Good question. Probably, but some keyserver operators might view >> it as rude. Best to ask on address@hidden

> Will do.

separate DNS

aptrevoker.debian.org so this can be turned off / redirected in case keyservers cannot handle the load

/etc/apt-revoker.d

The code for downloading the revocation certificates should be configurable.

Download the revocation certificates from:

  • version 1 - download from clearnet keyservers
  • version 2 - optionally download from onion keyservers
  • version 3 - optionally download from freenet