Gentoo Archives: gentoo-dev

From: Ulrich Mueller <ulm@g.o>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] [PATCH v2 00/11] Major GLEP 63 update; full text
Date: Wed, 04 Jul 2018 21:44:38
Message-Id: 23357.16313.956025.673422@a1i15.kph.uni-mainz.de
In Reply to: Re: [gentoo-dev] [PATCH v2 00/11] Major GLEP 63 update; full text by "Robin H. Johnson"
1 >>>>> On Wed, 4 Jul 2018, Robin H Johnson wrote:
2
3 >> > b. Signing subkey: 1 year maximum
4 >>
5 >> > 5. Key expiration date renewed at least 2 weeks before the
6 >> > previous expiration date.
7
8 > Only catch is that if I was doing it 2 weeks before, I'd want to
9 > push it out another year or 6 months (depending on what), so it
10 > would briefly be valid for 54 weeks.
11
12 Exactly, and that would be forbidden by the new policy.
13
14 Also I don't see why a shorter expiry of the subkey should be
15 mandatory. Has the current policy (which permits same expiry of main
16 key and subkey) caused any issues in the past?
17
18 Ulrich