Expiry bug (can convert v3 key to current?)

[Len Sassaman]

On 2 Jul 2001, Werner Koch wrote:

>  || On Sat, 30 Jun 2001 14:59:40 -0700 (PDT)
>  || Len Sassaman <rabbi@quickie.net> wrote:
>
>  ls> Erm, wait a second. I read that a little too fast.
>  ls> Werner, what's going on here?
>
> The specs only say that the primary key must be capable of signing.
> There is nothing in it to forbid a signing-only subkey.  In fact it
> has always been possible to create a DSA subkey with GnuPG.

That's correct -- in fact, I think it's even explicitly mentioned in the
specs... but I fear that this will cause more confusion for the users, and
add little advantage.

How does GnuPG handle signing subkey selection?

> I agree that gpg has the bug to ask for some properties (size of key)
> and later ignores the values because they make no sense for DSA.

Yep.

__

Len Sassaman

Security Architect            |
Technology Consultant         |  "Let be be finale of seem."
                              |
http://sion.quickie.net       |           --Wallace Stevens