Live data from Hacker News

GnuPG Fundraising Rally

gnupg.org

1–10 of 28 posts

Re: GnuPG Fundraising Rally

#4
post #3

I hope they spend some of that money on the keyservers, they seem to be down every time I want to grab some gpg keys.

Keyservers are hosted by volunteers as part of a distributed pool of hosts:

https://sks-keyservers.net/

And the pool's automated management infrastructure prunes misbehaving hosts pretty quickly (e.g. not responding, out of sync, etc). See "servers in the pool" and "servers currently not in the pool" here:

https://sks-keyservers.net/status/

Re: GnuPG Fundraising Rally

#5
I'll happily fund however much it will take to get them to religiously follow SemVer. Because there are soooo many breaking changes in patch releases that it's nearly impossible to keep our automation pipeline around gpg2 working consistently.

Re: GnuPG Fundraising Rally

#6
I just set up a recurring donation for what I think is fair given my (very small) use of GPG.

I can't help but cynically wonder how much funding GPG would get just from the various journalists in this donation video making a decent salary who claim that GPG is indispensable for their work.

Another case of free software tragedy of the commons.

Re: GnuPG Fundraising Rally

#8
I was wondering, how do they sustain such an effort ? I mean, working on GunPG is not exactly a simple task (I guess), so how do they fund themselves ? I understand the donations campaigns, but when that money dries off ? I read that the main dev had to work on other things not related to GunPG. Does it mean that we do have somebody working on GunPG with a sheer level of pragmatic altruism (i.e. working for close to nothing as long as he can feed its family) ? I'd like to know what it feels like to work on GnuPG from the inside...

Re: GnuPG Fundraising Rally

#9
post #8

I was wondering, how do they sustain such an effort ? I mean, working on GunPG is not exactly a simple task (I guess), so how do they fund themselves ? I understand the donations campaigns, but when that money dries off ? I read that the main dev had to work on other things not related to GunPG. Does it mean that we do have somebody working on GunPG with a sheer level of pragmatic altruism (i.e. working for close to…

The project was on the brink of collapsing a few years back, there was a ProPublica article back then that shed some light on what you're asking.

https://www.propublica.org/article/the-worlds-email-encrypti...

Re: GnuPG Fundraising Rally

#10
post #3

I hope they spend some of that money on the keyservers, they seem to be down every time I want to grab some gpg keys.

Keyservers are hosted by volunteers as part of a distributed pool of hosts: https://sks-keyservers.net/ And the pool's automated management infrastructure prunes misbehaving hosts pretty quickly (e.g. not responding, out of sync, etc). See "servers in the pool" and "servers currently not in the pool" here: https://sks-keyservers.net/status/

Well I'm just reporting the reality that the keyservers are down when I want to use them, almost without fail.

I suspect that gpg isn't trying multiple servers in the pool but only trying the first A record it finds. I've had to edit hosts to select a functioning key server in the pool many times.

Post reply on HN