GPG security review: Strengths, weaknesses, and best practices

Note

Key expiry and rotation as required best practice; complexity as primary operational risk