Re: [PATCH 0/7] Remove expired keys, 2024 edition

On Tue, Aug 05, 2025 at 09:59:01AM +0200, Uwe Kleine-König wrote:
> Hello,
> 
> this cleanup series removes 5 keys and one subkey that expired in 2024.
> Also a key that was revoked in 2020 is dropped.
> 
> None of the removed keys is part of trust paths to other keys, so there
> is no effect on the remaining keys.
> 
> I suggest to not apply this series straight away to give the affected
> owners the chance to extend the expiry date of their keys and replace
> them accordingly.
> 
> A bit orthogonal to this series: It is usually recommended to have an
> expiry date on PGP keys. Most keys (472 of now 620) don't have an expiry
> date, I wonder if that would be sensible to require at least for new
> keys added to the keyring. The upside would be that we don't trust keys
> that are already long abondoned. E.g. Gentoo requires that for the keys
> that are relevant for the project[1].
> 
> Currently there are 5 more keys contained in the keyring that expired in
> 2025:
> 
> 0AA04DC735ACE2B5.asc
> 	Bothersome Borer <[email protected]>
> 4C3262CBD285EB87.asc
> 	Confounding Cockroach <[email protected]>
> A16F9AB80CB2D395.asc
> 	Frank Rowand <[email protected]>
> 	Frank Rowand <[email protected]>
> 	Frank Rowand <[email protected]>
> 	Frank Rowand <[email protected]>
> 	Frank Rowand <[email protected]>
> 	Frank Rowand <[email protected]>
> 	Frank Rowand <[email protected]>
> BD6A501CB78B7C26.asc
> 	Jacek Anaszewski <[email protected]>
> 	Jacek Anaszewski <[email protected]>
> E7F85821938ABF6F.asc
> 	Aggravating Aphid <[email protected]>
> 
> These are the only keys left that (obviously) don't have a valid trust
> path from Linus' key.
> 
> Best regards
> Uwe
> 
> [1] https://www.gentoo.org/glep/glep-0063.html
> 
> Uwe Kleine-König (7):
>   Remove expired key of Kieran Bingham
>   Remove expired key of Imre Kaloz
>   Remove expired key of Eric Dumazet
>   Remove expired key of Pravin B Shelar
>   Remove expired key of Allison Henderson
>   Remove expired signing subkey of Joel Granados
Thanks for this. I had update my signing key but forgot to remove the
expired one. I use my updated Signing key that expires in 2027, so all
good from my side.

Best


-- 

Joel Granados