Re: [gentoo-dev] [PATCH v3 10/12] glep-0063: Make 2-yearly expiration term mandatory

[Ulrich Mueller]

>>>>> On Fri, 6 Jul 2018, Robin H Johnson wrote:

> On Fri, Jul 06, 2018 at 07:43:56AM +0200, Ulrich Mueller wrote:
>> Still NACK. If expiration is exactly 2 years and renewal must happen
>> 2 weeks before the expiry date, then it is not possible to keep the
>> same date.
>>
>> Example: The key will expire at 2018-12-31, so it must be renewed at
>> 2018-12-17 or earlier. This will make it impossible to keep the same
>> month and day (unless one would reset it to 2019-12-31, which is only
>> one year though).
>>
>> So please, make it something like 2 years + 3 months.

> option a)
> 2 years + N:
> 2 weeks <= N <= 3 months.

You don't want the first <= there. If it's 2 years + 2 weeks then devs
would have only one exact day for renewal of their key.

> option b)
> Change the wording to be 'at most 2 years' instead of 'exactly 2 years'.

I don't understand. How would this solve the problem?

> Separately:
> Is two weeks enough time for a new key distribution to users?

Ulrich