> > it says here http://www.gentoo.org/doc/en/gnupg-user.xml#doc_chap2 > > that the validity should be <6 month. What is the protocol when the > > expiry date is approaching? > > I'd say that should be changed. With keys changing every half a year, > we're soon going to have a tree spammed with Manifests signed using > expired keys.
Correct me if I'm wrong, but that does not invalidate the signature (if it was made before expiration). -- Andreas K. Huettel Gentoo Linux developer - kde, sci, arm, tex [email protected] http://www.akhuettel.de/
signature.asc
Description: This is a digitally signed message part.
