Re: WKD: conveying intent of encrypt-by-default?

2022-10-13 Thread Phil Pennock via Gnupg-users
On 2022-10-04 at 20:00 -0400, Daniel Kahn Gillmor wrote: > Autocrypt's focus is ubiquitous deployment of keying material (in the > form of OpenPGP certificates) so that people *can* encrypt when sending > mail. We found that one of the big risks is that a peer might > *automatically* encrypt when

Re: Subkeys renewing/expiring strategy

2022-10-13 Thread Ingo Klöcker
On Donnerstag, 13. Oktober 2022 11:39:41 CEST nect via Gnupg-users wrote: > > Since I use this key exclusively for commit signing, I can > > simply replace it with a completely different key if I change my mind. > > About this, how do you deal-or plan of dealing- with past commits signed > with a

Re: Subkeys renewing/expiring strategy

2022-10-13 Thread Teemu Likonen
* 2022-10-11 17:23:49+0200, nect via Gnupg-users wrote: > Since I was struggling to choose a strategy for expiring/renewing my > subkeys [...] We should ask why do you want to expire (and rotate) your subkeys? Maybe you have good reasons but I'll remind of the basic question: why not use the defa

Re: Subkeys renewing/expiring strategy

2022-10-13 Thread nect via Gnupg-users
Hello Ingo, Thank you for your reply. >You will still have to upload the updated key to every website you use. So, > you don't gain much if anything with this approach. You are totally right, I didn't think of that. In any case, this begs the question: is it better (best practice if you want) to