GPG Keysigning at FUDCon

Jesse Keating jkeating at redhat.com
Thu Jan 3 04:22:37 UTC 2008


On Wed, 02 Jan 2008 17:30:15 -0800
John Poelstra <poelstra at redhat.com> wrote:

> 3) Do most people create keys that expire or is it okay to create one 
> that does not?

I've heard that a good strategy if you're going to generate a
non-expiring key is to generate the revocation key at the same time,
and replicate that in even more places, so in the event that you lose
your private key you can revoke it instead of waiting for it to expire.

-- 
Jesse Keating
Fedora -- All my bits are free, are yours?
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-devel-list/attachments/20080102/15ea474c/attachment.sig>


More information about the fedora-devel-list mailing list