Faramir wrote: > Yes, but you can also edit the expiration date of the encrypting > subkey, if I am not wrong... Revoking the subkey is the canonical solution here.