RSA subkeys

Atom Smasher atom at smasher.org
Thu Feb 3 19:58:31 CET 2005


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Thu, 3 Feb 2005, Werner Koch wrote:

> On Thu, 3 Feb 2005 11:24:39 -0500 (EST), Atom Smasher said:
>
>> why not update the expiration date on the subkeys, and keep them? if 
>> they're not compromised there's no reason to throw them away.
>
> You never know whether a key is compromised.  Key rollover is actually a 
> good thing to gain some forward secrecy.  It helps against a warrant to 
> decrypt an old intercepted message - you can claim that you have 
> destroyed the key a few days after it expired.  Ask the UK folks about 
> that - well, they won't be allowed to tell.
=====================

ok, i guess that does have advantages under the UK's IPA(?). here in the 
states one is protected against govt abuse by not writing down their 
passphrase <http://law.richmond.edu/jolt/v2i1/sergienko.html>.


- -- 
         ...atom

  _________________________________________
  PGP key - http://atom.smasher.org/pgp.txt
  762A 3B98 A3C3 96C9 C6B7 582A B88D 52E4 D9F5 7808
  -------------------------------------------------

 	"They have computers, and they may have
 	 other weapons of mass destruction."
 		-- Janet Reno, US Attorney General,
 		27 Feb 1998

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (FreeBSD)
Comment: What is this gibberish?
Comment: http://atom.smasher.org/links/#digital_signatures

iQEcBAEBCAAGBQJCAnRcAAoJEAx/d+cTpVciWygH/2US+O7KkhSKLRjRxnkFwEfg
sT3AOCB2VZ/Ar5IO/7ovMZmUc/f9pZF26jTheGCR1cmN6aVJoIqUMVPoqIIWKQVE
LwtAHUgmO96z/DiyzKGGkenYljfO7TQ/0Gx0kT6L/bNHF/8zC/bUuGiOsms0QJxH
Lq5vU0RNYdp56YbL8PHjPpmjlAN19D41O37ZsgQYy8CzXzEoRjBP9ibY0LzObWel
073OuRNOg9qY1xRFh+LTvyMXJmRi3pRxOULO73gWCQWmn8/u3dgiDLWp1pH1BPIU
M6AN280/HOPwHpDWBxqbapucjJV9RXaJGdW+oxszw2il4DwtkFApo8WHok4ZAYo=
=DfB5
-----END PGP SIGNATURE-----



More information about the Gnupg-users mailing list