Currently the default keyserver in the conf-skel file is:
hkp://keys.gnupg.net
Apparently it is a CNAME of pool.sks-keyservers.net (on ns1.openit.de).
I wonder why we rely on the CNAME (and that DNS server) as default instead of
using pool.sks-keyservers.net directly.
For example, my router seems to have issue with it and does not even know to
timeout. (I have to admit this apparently is a bug of my router's firmware
though, since if I have any nameserver instead of my router in resolv.conf, it
seems to work)
According to drill the CNAME is the only entry on that server and the AUTHORITY
section and ADDITIONAL section is empty:
[tom@localhost ~]$ drill keys.gnupg.net @ns1.openit.de
;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 59794
;; flags: qr aa rd ; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 
;; QUESTION SECTION:
;; keys.gnupg.net.	IN	A
;; ANSWER SECTION:
keys.gnupg.net.	86400	IN	CNAME	pool.sks-keyservers.net.
;; AUTHORITY SECTION:
;; ADDITIONAL SECTION:
;; Query time: 263 msec
;; SERVER: 217.69.65.35
;; WHEN: Fri Nov 27 23:48:50 2015
;; MSG SIZE  rcvd: 66
Comparing to my local yahoo (which works fine with my router), I wonder if that
is a good way to implement the CNAME:
[tom@localhost ~]$ drill hk.yahoo.com @ns1.yahoo.com
;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 8124
;; flags: qr aa rd ; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 2 
;; QUESTION SECTION:
;; hk.yahoo.com.	IN	A
;; ANSWER SECTION:
hk.yahoo.com.	300	IN	CNAME	fd-fp3.wg1.b.yahoo.com.
;; AUTHORITY SECTION:
wg1.b.yahoo.com.	172800	IN	NS	yf4.a1.b.yahoo.net.
wg1.b.yahoo.com.	172800	IN	NS	yf2.yahoo.com.
wg1.b.yahoo.com.	172800	IN	NS	yf1.yahoo.com.
wg1.b.yahoo.com.	172800	IN	NS	yf3.a1.b.yahoo.net.
;; ADDITIONAL SECTION:
yf1.yahoo.com.	86400	IN	A	68.142.254.15
yf2.yahoo.com.	86400	IN	A	68.180.130.15
;; Query time: 157 msec
;; SERVER: 68.180.131.16
;; WHEN: Sat Nov 28 00:00:25 2015
;; MSG SIZE  rcvd: 175