keys/tripe-keys.master: Include a nontrivial `sig-fresh' example.

[tripe] / keys / tripe-keys.master

diff --git a/keys/tripe-keys.master b/keys/tripe-keys.master
index 8e165245e95a74f763accc0de184a68707c96b5d..4fe35f3a2ff5cb081850b4d9d6c8f322673197e3 100644 (file)
--- a/keys/tripe-keys.master
+++ b/keys/tripe-keys.master
@@ -23,7 +23,7 @@
 
 ## Key-generation parameters for key exchange group.
 # kx-param = -LS -b3072 -B256
-# kx-param = -Pnist-p256
+# kx-param = -Cnist-p256
 # kx-param =
 
 ## Expiry time for peer key-exchange keys.
@@ -45,6 +45,7 @@
 
 ## How recently an archive must have been signed to be valid.
 # sig-fresh = always
+# sig-fresh = 28 days ago
 
 ## When the master signing key expires.
 # sig-expire = forever