importing keys with expired signatures into gnupg

vedaal@hush.com vedaal@hush.com
Thu Jul 31 21:43:01 2003


recently there was a description about about v3 key with an expired signature,
 causing a problem with its importation into gnupg

[1] is this only for v3 keys, or all key types ?

[2] can this be maliciously exploited by signing a key with a signature
set to expire for the next day, uploading the key, and then causing difficulty
for anyone trying to import it?

{yet another reason for not allowing signatures without the keyowner's
permission ? }

tia,

with Respect,

vedaal 



Concerned about your privacy? Follow this link to get
FREE encrypted email: https://www.hushmail.com/?l=2

Free, ultra-private instant messaging with Hush Messenger
https://www.hushmail.com/services.php?subloc=messenger&l=434

Promote security and make money with the Hushmail Affiliate Program: 
https://www.hushmail.com/about.php?subloc=affiliate&l=427