| 1 |
>> > 4. Expiration date on key and all subkeys set to at most 2 years |
| 2 |
>> |
| 3 |
>> -at most 2 years. |
| 4 |
>> +at most 2 years from generation or refresh of expiry. |
| 5 |
> |
| 6 |
>Now, this won't really work because it's self-propagating date. You're |
| 7 |
>soon going to see keys with 10 years to expiration because if you |
| 8 |
>update |
| 9 |
>the date 5 times from 'refresh of expiry', that's what you get. |
| 10 |
> |
| 11 |
>I get what you're trying to say but I can't really think of a sane way |
| 12 |
>of stating that. Maybe I should just explicitly state '(plus the |
| 13 |
>period |
| 14 |
>specified in point 5)'. |
| 15 |
|
| 16 |
“The expiry date of the key shall never be more than two years in the future”? |
| 17 |
|
| 18 |
-- |
| 19 |
Christopher Head |
Archives