Archive all dead keys

KEYS.md

@@ -203,3 +203,32 @@ Finally, clean up the temporary files:
 ```bash
 shred -u /tmp/subkeys.asc /tmp/subkeys-deploy.asc
 ```
+
+
+## Key History
+
+All keys I have ever published live in the [`history`](history/) folder
+    as armored exports in their final state.
+
+Each file is self-proving:
+
+```bash
+gpg --show-keys history/*.asc  # shows the revocations and expiries
+```
+
+| Key ID             | Created    | Terminated         | Note                          |
+|--------------------|------------|--------------------|-------------------------------|
+| `6F75AAA4E8C99523` | 2020-06-16 | revoked 2020-07-17 | discarded                     |
+| `9EE068C095A840A0` | 2018-10-16 | revoked same day   | botched                       |
+| `77D28D388024AE85` | 2018-06-17 | revoked same day   | botched                       |
+| `887603E7D66B8AD4` | 2018-06-17 | revoked same day   | botched                       |
+| `CD9A863C023DB05B` | 2018-06-17 | revoked same day   | **never expires** (see below) |
+| `12325FF0C2459FA0` | 2017-02-21 | expired 2018-01-02 | first key ever                |
+
+- All private keys are destroyed;
+  so, none of the keys listed here can ever sign or decrypt again
+- These exports are the union of four public keyservers plus local archives,
+  making them more complete than any single public source
+- The expiry policy above is a lesson from `CD9A863C023DB05B`:
+  A revocation must reach every copy
+      whereas an expiry travels *inside* every copy