Gentoo Archives: gentoo-dev

From: "Michał Górny" <mgorny@g.o>
To: gentoo-dev@l.g.o
Cc: tomka@g.o, gentoo-dev@g.o
Subject: Re: [gentoo-dev] validity of manifest signing key
Date: Fri, 25 Mar 2011 14:48:30
Message-Id: 20110325154606.6ed0e539@pomiocik.lan
In Reply to: [gentoo-dev] validity of manifest signing key by Thomas Kahle
1 On Fri, 25 Mar 2011 10:47:19 +0100
2 Thomas Kahle <tomka@g.o> wrote:
3
4 > it says here http://www.gentoo.org/doc/en/gnupg-user.xml#doc_chap2
5 > that the validity should be <6 month. What is the protocol when the
6 > expiry date is approaching?
7
8 I'd say that should be changed. With keys changing every half a year,
9 we're soon going to have a tree spammed with Manifests signed using
10 expired keys.
11
12 --
13 Best regards,
14 Michał Górny

Attachments

File name MIME type
signature.asc application/pgp-signature

Replies

Subject Author
Re: [gentoo-dev] validity of manifest signing key "Andreas K. Huettel" <dilfridge@g.o>