On Sun, Jan 11, 2015 at 11:43 AM, Brian Dolbec <dol...@gentoo.org> wrote:
>   Of the remaining devs, only 16 keys total pass the GLEP 63
>   requirements.  More info can be found in the First-Use wiki page [4]

If you just create a gpg key with 5yr expiry and otherwise-default
options, typing a larger number into the keysize prompt, do you get a
compliant key?  The guides talk about editing your gpg.conf, and it
looks like the tool does it for you, but is any of that necessary to
generate a compliant key?  I'd prefer raw gpg commands and not a
script that automates everything.

Would this work:
gpg --gen-key
option 2 - DSA and Elgamal
size 3072 (the max)
expires 5y
Enter your name, email, and passphrase.

I've been putting off generating a new key until this all settles
down, and would prefer to mess with it as infrequently as possible.
Most likely I'll just switch to Gentoo-dedicated key for the tree.

-- 
Rich

Reply via email to