On Sat, 20 Jan 2024 at 11:09, James Bottomley <James.Bottomley@xxxxxxxxxxxxxxxxxxxxx> wrote: > > It also seems that this magic option combination works better (just > tried it on an old laptop that had my expired keys) > > gpg --auto-key-locate clear,dane --locate-external-key james.bottomley@xxxxxxxxxxxxxxxxxxxxx So now I have a new subkey. However, I note that you really do not seem to have gotten the message: sub nistp256 2018-01-23 [S] [expires: 2026-01-16] E76040DB76CA3D176708F9AAE742C94CEE98AC85 WTF? What happened to "stop doing these idiotic short expirations"? What's the advantage of all this stupid and pointless pain? Why didn't you extend it by AT LEAST five years? Has the expiration date *EVER* had a single good reason for it? >From a quick git lookup, in the last year I have pulled from 160 people. Imagine if they all set two-year expiration dates. Do the math: I'd see pointlessly expired keys probably on average once or twice a week. Guess why I don't? BECAUSE NOBODY ELSE DOES THAT POINTLESS EXPIRY DANCE. Why do you insist on being the problem? Stop it. Really. I'm tired of the pointless extra work. PGP keys are a disaster, and you keep on making things worse than they need to be. Linus