Alert for expiring secret keys about gpgsync

[micahflee]

👍

[micahflee]

This feature should probably also include an option to disable it. It looks like GPGTools doesn't yet support this, but they might add it, and people probably wouldn't want two different PGP-related programs both notifying them: https://gpgtools.lighthouseapp.com/projects/65684-gpg-keychain-access/tickets/59-key-expired-notifier

Also, should PGP Sync warn you about secret keys that are already expired? And what if you want to allow a key to expire? The warning that pops up telling you that a secret key you control is about to expire should probably have a "Ignore expiration warnings about this key" button, while still giving you warnings for other keys.

And another thing to think about is how to actually update the expiration date of the key. PGP Sync could try to update it for you, but then we'd need to build a full GUI for that. Or it could tell you to use other software (such as GPG Keychain Access) to update it. I think I prefer the latter.

[samuelcouch]

Also, should PGP Sync warn you about secret keys that are already expired? And what if you want to allow a key to expire? The warning that pops up telling you that a secret key you control is about to expire should probably have a "Ignore expiration warnings about this key" button, while still giving you warnings for other keys.

Maybe we could have a Check for secret keys button that then populates a list of keys with a checkbox-to-enable-notification next to each?

PGP Sync could try to update it for you, but then we'd need to build a full GUI for that. Or it could tell you to use other software (such as GPG Keychain Access) to update it. I think I prefer the latter.

I prefer the latter as well.

[micahflee]

Maybe we could have a Check for secret keys button that then populates a list of keys with a checkbox-to-enable-notification next to each?

I think the simplest UX would be to just automatically prompt users to update their expiring keys and include an "ignore this key" button in the prompts. The settings object could contain a list of fingerprints to ignore. And when you open the soon-to-exist options dialog (#23), it can list all of your secret keys and let you manually check boxes next to the ones you want to ignore. This way the default behavior would be to always prompt users, but they'd have an easy way to disable/enable it.

Also, we should make sure not to prompt users more than once a day about expiring keys. I can see not having time to deal with it today, and appreciating another prompt tomorrow though.

[samuelcouch]

Leaving this here as a reference for finding when your key(s) expire
gpg -K | grep "\[expires:" | cut -d ":" -f 2 | cut -d " " -f 2 | cut -d "]" -f 1

[micahflee]

GPG Tools now alerts on expiring keys, so I don't think this feature is necessary anymore for GPG Sync.