On Tue, 25 Oct 2011 20:27, [email protected] said:
> On Tue, 25 Oct 2011 14:48, [email protected] said:
>> Since most of these certificates appear to be expired anyway, can I
>> just delete that file? I am not sure why they are being listed anyway.
>
> Yes.

I will keep them in the file because these certificates are useful in
the "chain" validation model.  Usually we use the "shell" model where
expiration dates have an obvious meaning.  For German qualified
signatures the "chain" model is required.  Basically, it compares the
expiration date to the date given in the signatures.



Shalom-Salam,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.


_______________________________________________
Gnupg-users mailing list
[email protected]
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Reply via email to