On Mon, 2026-01-26 at 18:32 +0100, Uwe Kleine-König wrote:
> Actually I'd like to see you/us add still more burden and asking
> developers to only hand in keys with an expiry date <= (say) 3 years.
> Something similar to what
> https://www.gentoo.org/glep/glep-0063.html#bare-minimum-requirements
> requests.

You have seen Linus' views on gpg key expiry, right?

https://lore.kernel.org/linux-scsi/CAHk-=wi03SZ4Yn9FRRsxnMv1ED5Qw25Bk9-+ofZVMYEDarHtHQ@mail.gmail.com/

As a result of that I've taken to using much longer expiry periods.

Regards,

James