Why is "--allow-non-selfsigned-uid" needed to import this key?

Werner Koch wk at gnupg.org
Tue May 17 17:04:27 CEST 2011


On Mon, 16 May 2011 22:12, steve.strobel at link-comm.com said:

> easy to ask the user for the date.  What would the security
> implications be of just setting the clock to a fixed future date
> before importing the key?

I can see no problems from GnuPG's perspective.  I suggest to start with
a fixed date way before 2038.  There is also an option
--ignore-valid-drom which pertains to the selection of subkeys.  Check
the man page.


Shalom-Salam,

   Werner


-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.




More information about the Gnupg-users mailing list