1 |
>>>>> On Wed, 4 Jul 2018, Robin H Johnson wrote: |
2 |
|
3 |
>> > b. Signing subkey: 1 year maximum |
4 |
>> |
5 |
>> > 5. Key expiration date renewed at least 2 weeks before the |
6 |
>> > previous expiration date. |
7 |
|
8 |
> Only catch is that if I was doing it 2 weeks before, I'd want to |
9 |
> push it out another year or 6 months (depending on what), so it |
10 |
> would briefly be valid for 54 weeks. |
11 |
|
12 |
Exactly, and that would be forbidden by the new policy. |
13 |
|
14 |
Also I don't see why a shorter expiry of the subkey should be |
15 |
mandatory. Has the current policy (which permits same expiry of main |
16 |
key and subkey) caused any issues in the past? |
17 |
|
18 |
Ulrich |