On 28/02/11 4:35 PM, Grant Olson wrote: > On 02/27/2011 11:48 PM, Ben McGinnes wrote: >> >> Heh. Are you aiming for some kind of simultaneously expired and >> accepted key? Schrödinger's Key, if you will. >> > > Yep, basically I will set my key to expire one day later and push it > to the keyservers. I will intentionally not retrieve the updated > expiration on my machines and continue to sign as usual. And see > how long it takes people to catch on.
My guess is that it will probably take a while. > I've always wondered how many people would actually realize a key > has been revoked after publishing a revcert to the keyservers. If > could undo a revocation, I'd do that instead. But I think a > expiration is a good enough simulation. It should cause people to > raise some eyebrows if they're refreshing their keyrings regularly. This is the thing. I think a lot of people do tend to be quite lax when it comes to refreshing keys from the keyservers. > I've already got a date picked out. You've been warned... ;-) This, of course, has reminded me that it has been a while since I've refreshed my own keyrings, so I'm running that now. Regards, Ben
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Gnupg-users mailing list [email protected] http://lists.gnupg.org/mailman/listinfo/gnupg-users
