Re: [bug-gnu-libiconv] libiconv signing key

[George Rawlinson]

On 20-10-31 19:54, Bruno Haible wrote:
> [CCing the mailing list]
>
> Hello,
>
> George Rawlinson wrote:
> > The key used to sign libiconv (version 1.16) has expired.
> >
> > I believe it is this key: 68D94D8AAEEAD48AE7DC5B904F494A942E4616C2.
>
> Thanks for reporting this, but:
>
> A key expiry is something else than a key revocation.
>
> Keys eventually expire, yet signatures previously made with them remain
> valid pieces of information. As long as the signature was made before
> the key expired (which you can infer by looking at the timestamp of
> the file on ftp.gnu.org - even if you don't trust the date in the signature
> itself), you can trust the signature.
>
> Bruno

Thanks Bruno,

Appreciate the explanation.

--
George Rawlinson
PGP: 25EA6900D9EA5EBC

signature.asc
Description: PGP signature