If you import the key or follow the links on the MIT key server lookup I 
included, you'll find the expiration date.

> On Mar 26, 2014, at 12:01 PM, Nick Burch <[email protected]> wrote:
> 
>> On Wed, 26 Mar 2014, Gary wrote:
>> Following the download instructions on the project's site, I have noticed
>> that Yegor Kozlov's PGP key has been expired since June 16, 2012;
>> http://pgp.mit.edu/pks/lookup?search=0xf5bb52cd. I have imported keys from
>> http://archive.apache.org/dist/poi/KEYS. I can see that it's valid and I
>> can see the chain of trust but using an expired key is bad form and
>> probably should be remediated.
> 
> Hmm, I'm seeing his key as never expiring:
> 
> pub  1024D/F5BB52CD  created: 2007-06-18  expires: never       usage: SC
>                     trust: unknown       validity: full
> sub  4096g/7B45A98A  created: 2007-06-18  expires: never       usage: E
> [  full  ] (1). Yegor Kozlov <[email protected]>
> [  full  ] (2)  Yegor Kozlov <[email protected]>
> [  full  ] (3)  Yegor Kozlov <[email protected]>
> 
> Nick
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
> 

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to