diff --git a/OpenPGP-Security.md b/OpenPGP-Security.md index d74ae16..8bbf890 100644 --- a/OpenPGP-Security.md +++ b/OpenPGP-Security.md @@ -35,7 +35,7 @@ Anyone can upload keys with User IDs containing the email and names of other per Thus, expiry dates are no valid fix for a much bigger problem that lies in the way OpenPGP keyservers operate currently. * In general, OpenPGP keys need to be validated through other channels than keyservers to rely on them. -#### Arguments for expiry +#### Arguments in favor of expiry from http://blog.josefsson.org/2014/08/26/the-case-for-short-openpgp-key-validity-periods/ (detailed arguments in the blog) > 1. I don’t trust myself to keep track of a private key (or revocation cert) for 50 years. > 2. I want people to notice my revocation certificate as quickly as possible.