Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #196835

Re: Expired GPG keys of older release

Show all headers | View raw

On Wednesday, June 20, 2018 10:25:25 PM Ben Finney wrote:
> In other words: Yes, it's inconvenient, but it's because *no one can
> know* with confidence any more whether that key has been compromised.

Well, I should study up more on keys and expiration, but isn't the situation 
much the same before the key expires?  I mean, the issuer / owner of the key 
really doesn't know whether the key has been compromised?  

(There might be / probably is less chance it has been compromised (in 
congruence with your last paragraph, quoted below), but, the person that 
breaks a key doesn't report to the owner that he has done so ;-)

> So that does put it into the same category as “who the hell knows
> whether this signature is associated with the key owner”.
> 
> That's just a fact that follows from the finite lifetime of the security
> of a given key. The longer it's been out there, the larger the window
> for compromise; and we're now outside the window where the key owner
> warrants to still be in control of that key. Don't trust whatever
> signatures you find with that key any more.

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Re: Expired GPG keys of older release john doe <johndoe65534@mail.com> - 2018-06-19 20:40 +0200
  Re: Expired GPG keys of older release john doe <johndoe65534@mail.com> - 2018-06-19 22:00 +0200
  Re: Expired GPG keys of older release Don Armstrong <don@debian.org> - 2018-06-19 22:50 +0200
    Re: Expired GPG keys of older release john doe <johndoe65534@mail.com> - 2018-06-20 08:50 +0200
      Re: Expired GPG keys of older release john doe <johndoe65534@mail.com> - 2018-06-20 09:50 +0200
        Re: Expired GPG keys of older release <tomas@tuxteam.de> - 2018-06-20 10:00 +0200
        Re: Expired GPG keys of older release john doe <johndoe65534@mail.com> - 2018-06-20 10:10 +0200
      Re: Expired GPG keys of older release Greg Wooledge <wooledg@eeg.ccf.org> - 2018-06-20 14:20 +0200
        Re: Expired GPG keys of older release <tomas@tuxteam.de> - 2018-06-20 17:10 +0200
          Re: Expired GPG keys of older release Curt <curty@free.fr> - 2018-06-20 19:10 +0200
            Re: Expired GPG keys of older release <tomas@tuxteam.de> - 2018-06-20 21:20 +0200
              Re: Expired GPG keys of older release Curt <curty@free.fr> - 2018-06-20 22:00 +0200
        Re: Expired GPG keys of older release Greg Wooledge <wooledg@eeg.ccf.org> - 2018-06-20 17:10 +0200
          Re: Expired GPG keys of older release Roberto C. Sánchez <roberto@debian.org> - 2018-06-20 17:20 +0200
            Re: Expired GPG keys of older release Greg Wooledge <wooledg@eeg.ccf.org> - 2018-06-20 17:20 +0200
              Re: Expired GPG keys of older release Roberto C. Sánchez <roberto@debian.org> - 2018-06-20 18:00 +0200
              Re: Expired GPG keys of older release Dan Purgert <dan@djph.net> - 2018-06-20 18:00 +0200
            Re: Expired GPG keys of older release David Wright <deblis@lionunicorn.co.uk> - 2018-06-21 04:00 +0200
        Re: Expired GPG keys of older release Ben Finney <bignose@debian.org> - 2018-06-21 04:30 +0200
          Re: Expired GPG keys of older release rhkramer@gmail.com - 2018-06-21 14:20 +0200
            Re: Expired GPG keys of older release Ben Finney <bignose@debian.org> - 2018-06-22 01:10 +0200
    Re: Expired GPG keys of older release Don Armstrong <don@debian.org> - 2018-06-20 19:40 +0200
      Re: Expired GPG keys of older release <tomas@tuxteam.de> - 2018-06-20 21:30 +0200
        Re: Expired GPG keys of older release Don Armstrong <don@debian.org> - 2018-06-20 22:10 +0200
          Re: Expired GPG keys of older release <tomas@tuxteam.de> - 2018-06-21 09:00 +0200
        Re: Expired GPG keys of older release Ansgar Burchardt <"Ansgar Burchardt"@43-1.org> - 2018-06-21 00:30 +0200
          Re: Expired GPG keys of older release <tomas@tuxteam.de> - 2018-06-21 09:00 +0200

csiph-web