Gentoo Archives: gentoo-dev

From: Mike Frysinger <vapier@g.o>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] validity of manifest signing key
Date: Fri, 25 Mar 2011 19:01:33
Message-Id: AANLkTi=U0wbwY-4tVfybyK-SXwiLCkME6L0tkfnvFg6o@mail.gmail.com
In Reply to: [gentoo-dev] validity of manifest signing key by Thomas Kahle
1 On Fri, Mar 25, 2011 at 5:47 AM, Thomas Kahle wrote:
2 > it says here http://www.gentoo.org/doc/en/gnupg-user.xml#doc_chap2 that
3 > the validity should be <6 month.  What is the protocol when the expiry
4 > date is approaching?
5 >
6 > -) Extend expiry date and upload again?
7
8 i wasnt aware you could extend the expiration date of a key. that
9 sort of defeats the purpose of having an expiration date doesnt it ?
10 then someone could steal your expired key, extend the date, and keep
11 using it.
12 -mike

Replies

Subject Author
Re: [gentoo-dev] validity of manifest signing key "Andreas K. Huettel" <dilfridge@g.o>
Re: [gentoo-dev] validity of manifest signing key "Paweł Hajdan