Certification-only key

[Doug Barton]

On 10/4/2010 8:22 AM, Lionel Elie Mamane wrote:
> Also, when my signature subkey expires, it would (I guess) silently
> start using the primary. Which makes me_very_  happy I chose to make
> my primary certification-only, because signatures started to fail
> instead, which gave me notice and allowed me to issue a new signature
> subkey:)

Why did you choose to make your signature subkey expire, and why would 
you not simply extend the expiration date of the existing key rather 
than create a new one?


Doug

-- 

Breadth of IT experience, and    |   Nothin' ever doesn't change,
depth of knowledge in the DNS.   |   but nothin' changes much.
Yours for the right price.  :)   |		-- OK Go
http://SupersetSolutions.com/