suggestions surrounding key generating

[Frank Tobin]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Graham, at 13:11 -0000 on Wed, 8 Nov 2000, wrote:

> My experience with PGP in Windows leads me to believe that its better
> to have keyservers have a key on them, even if revoked.  If it is
> revoked, people will know that the key is not to be used, and this is
> better than them having no record of a key.  It is better that those
> keys have no date of expiry, therefore.  At present there are no
> keyserver facilities in GnuPG for Windows, so the issue does not arise
> (keys are sent to keyservers via PGP).

Sure, they should have keys, even if revoked.  Your jump to "therefore, it
is better that those keys have no date of expiry" does not follow,
however.

> And what happens if somebody totally new to PGP/GnuPG generates a key
> with a date limit, encrypts a message/document with that key, then
> cannot decrypt it because of the date limit?

Expiration does not prevent anyone from doing anything.  It is merely
advisory.

- -- 
Frank Tobin		http://www.uiuc.edu/~ftobin/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (FreeBSD)
Comment: pgpenvelope 2.9.0 - http://pgpenvelope.sourceforge.net/

iEYEARECAAYFAjoJ4WUACgkQVv/RCiYMT6MhKQCfQ4YOy/gE/2ZRcR+l7yUSb2CE
9dsAni9dk6FRehxU+Krwdt2Abo8kBU8L
=9GNM
-----END PGP SIGNATURE-----

-- 
Archive is at http://lists.gnupg.org - Unsubscribe by sending mail
with a subject of  "unsubscribe"  to gnupg-users-request@gnupg.org