Re: [Sks-devel] expiration date in machine readable results

[John Clizbe]

Daniel Kahn Gillmor wrote:

I think it's doable. Compare

http://keyserver.gingerbear.net/pks/lookup?search=0x83EB2E0A&fingerprint=on&op=index

and

http://keyserver.gingerbear.net/pks/lookup?search=0x83EB2E0A&fingerprint=on&op=vindex

Presently, &options=mr returns the same for either op value, index or vindex.


> 
> i'm a little unsure of the logic about the direct signatures.  perhaps
> it should just select the key expiration time from the most recent
> direct signature?

That is what it does

> If a direct signature gets made on a key at time T with a key expiration
> subpacket of X seconds from creation, and then another direct signature
> gets made at time T+1 with a key expiration subpacket of X-1 seconds
> from creation, should the resulting expiration be X or X-1 ?

X-1, since it was made last. This is how a user changes expiration date/time

> What if the newer direct signature has no key expiration subpacket at all?

Then there would be no expiration time at all

-John

-- 

John P. Clizbe                      Inet: John (a) Gingerbear DAWT net
SKS/Enigmail/PGP-EKP                  or: John ( @ ) Enigmail DAWT net
FSF Assoc #995 / FSFE Fellow #1797  hkp://keyserver.gingerbear.net  or
     mailto:address@hidden

Q:"Just how do the residents of Haiku, Hawai'i hold conversations?"
A:"An odd melody / island voices on the winds / surplus of vowels"

signature.asc
Description: OpenPGP digital signature