Am Freitag, 6. Mai 2011, 09:47:57 schrieb Doug Barton:

> There's also another element, the expiration date is irrelevant if the
> key is actually compromised. If Eve has your secret key she can simply
> update or remove the expiration date, and upload the new version of the
> public key to the public keyservers.

That's not correct for subkeys and offline mainkeys as the good guys do it.

I admit that a subkey expiration date does not make much sense for low 
security mainkeys but it is quite useful for more secure environments.


Hauke
-- 
PGP: D44C 6A5B 71B0 427C CED3 025C BD7D 6D27 ECCB 5814

Attachment: signature.asc
Description: This is a digitally signed message part.

_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Reply via email to