On Wed, 13 Apr 2016 16:30, derek(_at_)ihtfp(_dot_)com said:
I still believe we should use b, with the knowledge that the hard
expiration is optional (could be 0). This would protect against an
attack where you lose control of your secret material and the attacker
creates a new self-sig with a new expiration time.
Although I do not see a real need for this, I would accept this.
Salam-Shalom,
Werner
--
Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz.
_______________________________________________
openpgp mailing list
openpgp(_at_)ietf(_dot_)org
https://www.ietf.org/mailman/listinfo/openpgp