Keyserver for gpg.conf ?

Francesco Poli <[email protected]> Sat, 15 Nov 2025 10:34:27 +0100
Newsgroups gmane.linux.debian.devel.security
Message-ID <[email protected]>
--Signature=_Sat__15_Nov_2025_10_34_27_+0100_03Hhnoe_0faqL13.
Content-Type: text/plain; charset=US-ASCII
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hello everyone!

I had

  keyserver hkps://pgp.surf.nl

in my ~/.gnupg/gpg.conf , but I have been experiencing issues with it
for the last few days, see the following excerpt from /var/log/syslog :

  dirmngr[3569]: error accessing 'https://pgp.surf.nl:443/pks/lookup?op=3Dg=
et&options=3Dmr&search=3D0x............': http status 503
  dirmngr[3569]: selecting a different host due to a 503 (Service Unavailab=
le)
  dirmngr[3569]: error accessing 'https://pgp.surf.nl:443/pks/lookup?op=3Dg=
et&options=3Dmr&search=3D0x............': http status 503
  dirmngr[3569]: selecting a different host due to a 503 (Service Unavailab=
le)
  dirmngr[3569]: error accessing 'https://pgp.surf.nl:443/pks/lookup?op=3Dg=
et&options=3Dmr&search=3D0x............': http status 503
  dirmngr[3569]: selecting a different host due to a 503 (Service Unavailab=
le)
  dirmngr[3569]: error accessing 'https://pgp.surf.nl:443/pks/lookup?op=3Dg=
et&options=3Dmr&search=3D0x............': http status 503
  dirmngr[3569]: selecting a different host due to a 503 (Service Unavailab=
le)
  dirmngr[3569]: error accessing 'https://pgp.surf.nl:443/pks/lookup?op=3Dg=
et&options=3Dmr&search=3D0x............': http status 503
  dirmngr[3569]: selecting a different host due to a 503 (Service Unavailab=
le)
  dirmngr[3569]: error accessing 'https://pgp.surf.nl:443/pks/lookup?op=3Dg=
et&options=3Dmr&search=3D0x............': http status 503
  dirmngr[3569]: command 'KS_GET' failed: No data


I tried to change keyserver.
The Debian wiki key signing [page] suggests the following ones (beyond
the Debian keyring one):

 * https://keyserver.ubuntu.com (recommended)
 * https://keys.openpgp.org/ (used by Thunderbird)
 * https://pgp.surf.nl/
 * https://pgp.mit.edu

[page]: <https://wiki.debian.org/Keysigning>

Among these, I only managed to make the following one work:

  keyserver hkps://pgp.mit.edu

But it seems to work unreliably, it worked for a couple of key
refreshes, but now it's giving me:

  dirmngr[4391]: host 'pgp.mit.edu' marked as dead
  dirmngr[4391]: host 'pgp.mit.edu' marked as dead
  dirmngr[4391]: host 'pgp.mit.edu' marked as dead
  dirmngr[4391]: host 'pgp.mit.edu' marked as dead
  dirmngr[4391]: host 'pgp.mit.edu' marked as dead
  dirmngr[4391]: host 'pgp.mit.edu' marked as dead
  dirmngr[4391]: host 'pgp.mit.edu' marked as dead
  dirmngr[4391]: host 'pgp.mit.edu' marked as dead
  dirmngr[4391]: command 'KS_GET' failed: No keyserver available
  dirmngr[4391]: host 'pgp.mit.edu' marked as dead
  dirmngr[4391]: command 'KS_GET' failed: No keyserver available


Which keyserver do you currently use/recommend ?

Thanks for any help you may provide!


P.S.: please Cc me on replies, I am not subscribed to the list.

--=20
 http://www.inventati.org/frx/
 There's not a second to spare! To the laboratory!
..................................................... Francesco Poli .
 GnuPG key fpr =3D=3D CA01 1147 9CD2 EFDF FB82  3925 3E1C 27E1 1F69 BFFE

--Signature=_Sat__15_Nov_2025_10_34_27_+0100_03Hhnoe_0faqL13.
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
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=RsOA
-----END PGP SIGNATURE-----

--Signature=_Sat__15_Nov_2025_10_34_27_+0100_03Hhnoe_0faqL13.--