Re: Web of Trust work [Was: kernel.org tooling update]

James Bottomley
2026-01-26T23:23:11Z

[-- Attachment #1: Type: text/plain, Size: 572 bytes --]

On Mon, 2026-01-26 at 18:32 +0100, Uwe Kleine-König wrote:
> Actually I'd like to see you/us add still more burden and asking
> developers to only hand in keys with an expiry date <= (say) 3 years.
> Something similar to what
> https://www.gentoo.org/glep/glep-0063.html#bare-minimum-requirements
> requests.

You have seen Linus' views on gpg key expiry, right?

https://lore.kernel.org/linux-scsi/CAHk-=wi03SZ4Yn9FRRsxnMv1ED5Qw25Bk9-+ofZVMYEDarHtHQ@mail.gmail.com/

As a result of that I've taken to using much longer expiry periods.

Regards,

James

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 265 bytes --]