setting expiration date changes primary UID (was: Re: GnuPG race causes misordered uids?

[Werner Koch]

On Tue, 27 May 2003 12:11:58 -0400, David Shaw said:

> I think it would be reasonable to ensure that the earliest user ID
> before the "expire" command is still the earliest after the command.

If you the want to change the expiration time of the earliest user ID,
the timestamp of the self-signature needs to be faked; i.e. set to the
old date or a date before any other self-signatures timestamp.  IMHO
it would be surprise to if a user-ID/self-signature get an new
expuration time but the timestamp does not reflect the date of the
modification.

Better make sure the primary flag has been set.  A warning should be
sufficient.


Shalom-Salam,

   Werner

-- 
  Nonviolence is the greatest force at the disposal of
  mankind. It is mightier than the mightiest weapon of
  destruction devised by the ingenuity of man. -Gandhi