Replicant

Wolfgang wiedmeyer's key and me (in a bigger extent) have chosen to have expiration dates on our GPG keys.

This is a really good practice for security and it at least would enable me to more easily cope with the loss of my key: if I loose access to it at some point it will just expire and I will stop receiving mails that I can't decrypt anymore.

However we currently publish key the way they are at the time of the releases.

We probably need to create a new directory with all the public gpg keys having signed releases and keep updating them somehow and point to the last version of the key in the installation instructions.