Gentoo Archives: gentoo-dev

From: "Aaron W. Swenson" <titanofold@g.o>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests
Date: Wed, 13 Feb 2013 15:31:17
Message-Id: 20130213153020.GA3404@gengoff.gsmr.local
In Reply to: Re: [gentoo-dev] Re: [gentoo-dev-announce] please sign your manifests by Michael Weber
1 On Wed, Feb 13, 2013 at 01:20:39PM +0100, Michael Weber wrote:
2 > On 02/13/2013 11:55 AM, Markos Chandras wrote:
3 > > http://www.gentoo.org/doc/en/gnupg-user.xml
4 > >
5 > still no hint what to do on expiration (as every single other "gpg howto").
6 >
7
8 It depends. What do you want to do when it expires?
9
10 If you don't believe that the key has been compromised -- nobody is
11 going around using your key falsely -- then you should just "renew"
12 your key, i.e change the expiry date.
13
14 Some that are a bit more paranoid will generate a new key, sign it
15 with the about-to-expire key -- not the already expired key because
16 they would never allow that to happen -- revoke the about-to-expire
17 key, then sync with the key server(s).
18
19 This information, by the way, has been blogged about thousands of
20 times.
21
22 --
23 Mr. Aaron W. Swenson
24 Gentoo Linux Developer
25 Email : titanofold@g.o
26 GnuPG FP : 2C00 7719 4F85 FB07 A49C 0E31 5713 AA03 D1BB FDA0
27 GnuPG ID : D1BBFDA0

Attachments

File name MIME type
signature.asc application/pgp-signature

Replies