Re: [Sks-devel] Can SKS cope with the same key (and same fingerprint) in two different roles?

[David Shaw]

On May 22, 2009, at 1:36 PM, Daniel Kahn Gillmor wrote:

> On 05/22/2009 01:31 PM, David Shaw wrote:
> > I think it's not valid because the subkey expired in 2006.
>
> but the keyservers suggest that 1E88BF71 is valid until 2013-04-14,
> based on the most-recent subkey binding sig:
>
> http://zimmermann.mayfirst.org/pks/lookup?op=vindex&search=0xB88D52E4D9F57808
>
> or am i misreading this?
>
> I see:
>
>
> sub  2048g/1E88BF71 2003-10-04
> sig sbind  D9F57808 2004-05-12 __________ 2006-01-25 []
> sig sbind  D9F57808 2004-05-12 __________ 2006-01-25 []
> sig sbind  D9F57808 2004-07-17 __________ 2013-04-14 []

That's one of the limitations of the keyservers - they don't have  
crypto, so can't tell that the 2004-07-17 signature isn't valid.  GPG  
can, though, and won't import it.  It's a bad signature.

David