Strange PGP key

patroclo7 · 2017-11-01 16:55:56

During my latest system upgrade, pacman asked me to import a PGP key created by Gaetan Bisson with the following date: "1998-03-24".

Isn't it a bit old? Is there something strange about which I should worry? (sincerely: I lazily accepted to import it, and began to worry only afterwards ).

Scimmia · 2017-11-01 16:57:43

Importing it doesn't really do anything dangerous. It would only be trusted if it's signed by the necessary master keys.

In this case, the key is correct.

douglas · 2017-11-01 18:06:42

I was thinking the same thing, here's the full info:

pub   ed25519 1998-03-24 [SCA]
      1A60DC44245D06FEF90623D6EEEEE2EEEE2EEEEE
uid           [  full  ] Gaetan Bisson <gaetan@fenua.org>
uid           [  full  ] Gaetan Bisson <bisson@gaati.org>
uid           [  full  ] Gaetan Bisson <bisson@archlinux.org>
sub   cv25519 2017-08-27 [E]

Can anybody confirm it's still a valid key?

Scimmia · 2017-11-01 18:08:57

lol, I already confirmed it, the full trust confirms it, and you can check the page linked on the front page to confirm it. What more do you want?

eschwartz · 2017-11-03 20:27:21

patroclo7 wrote:

During my latest system upgrade, pacman asked me to import a PGP key created by Gaetan Bisson with the following date: "1998-03-24".
Isn't it a bit old? Is there something strange about which I should worry? (sincerely: I lazily accepted to import it, and began to worry only afterwards ).

Just because a key is old doesn't mean it is a bad key.
And just because a key has an old date, doesn't mean it wasn't created on a system that had had the date temporarily changed.

Considering the key ID, it is quite obvious that Gaetan was having fun when he created it, so why does the date surprise you?

Arch Linux

#1 2017-11-01 16:55:56

Strange PGP key

#2 2017-11-01 16:57:43

Re: Strange PGP key

#3 2017-11-01 18:06:42

Re: Strange PGP key

#4 2017-11-01 18:08:57

Re: Strange PGP key

#5 2017-11-03 20:27:21

Re: Strange PGP key

Board footer