| 1 |
> > it says here http://www.gentoo.org/doc/en/gnupg-user.xml#doc_chap2 |
| 2 |
> > that the validity should be <6 month. What is the protocol when the |
| 3 |
> > expiry date is approaching? |
| 4 |
> |
| 5 |
> I'd say that should be changed. With keys changing every half a year, |
| 6 |
> we're soon going to have a tree spammed with Manifests signed using |
| 7 |
> expired keys. |
| 8 |
|
| 9 |
Correct me if I'm wrong, but that does not invalidate the signature (if it was made before expiration). |
| 10 |
|
| 11 |
-- |
| 12 |
Andreas K. Huettel |
| 13 |
Gentoo Linux developer - kde, sci, arm, tex |
| 14 |
dilfridge@g.o |
| 15 |
http://www.akhuettel.de/ |
Archives