YahooArchive / end-to-end

Use OpenPGP-based encryption in Yahoo mail.
http://yahoo.tumblr.com/post/113708033335/user-focused-security-end-to-end-encryption
Apache License 2.0
223 stars 40 forks source link

keyserver client: retry updates after process/network failures #68

Open andres-erbsen opened 8 years ago

andres-erbsen commented 8 years ago

If we want to avoid the need for manual recovery in case a profile update makes it to the keyserver but the reply does not make it back, the client should retry the update until it gets a definitive response, EVEN IF the client has not been running continuously since it first issued the update. Not doing this can cause the affected client to sign messages using the previous PGP key while its contacts see the results of an update whose reply got list (and thus they reject the signatures).

adon-at-work commented 8 years ago

your description doesn't sound there's a need to retry updates (i.e., re-upload the key), as the update request has reached the keyserver.

does it mean more like every time before a signature is made, make a fresh lookup for the verifiable public key, and uses only the corresponding private one for signature?

c.c. @maditya