[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: GPG Key question



On Mon, Jun 17, 2002 at 10:53:19PM -0400, B. L. Jilek wrote:
> Hi Stephen!

> On Mon, 17 Jun 2002, Stephen Stafford wrote:

> > On Tue, Jun 18, 2002 at 12:07:56AM +0200, Rene Engelhard wrote:
> > > Paul Cupis wrote:
> > > >                  Present  a  menu which enables you to do all key
> > > >                  related tasks:
> > > > 
> > > >                  revsig    Revoke a signature.   GnuPG  asks  for
> > > >                            every signature which has been done by
> > > >                            one of  the  secret  keys,  whether  a
> > > >                            revocation  certificate should be gen
> > > >                            erated.

> > > > So it looks like you can generate a revokation certificate for a particular 
> > > > signature.
> > >   ^^^^^^^^^

> > > Yes, you can revoke a _signature_. But that was not the question. He
> > > wanted to remove one of his _uid_'s. And that is *not* possible.

> > > Rene

> > Sure it is.  It has *exactly* the effect of removing the UID.  The UID
> > remains, but is clearly marked as being revoked.  This should tell everyone
> > that the UID is no longer to be associated with the key.  This is The
> > Correct Way to remove stale UIDs AFAIK.

> Actually you can delete the uid.  It will not show up on the key.
> If you don't have any other uid you will have to create a new one.

> I would delete it.  It don't look like it's the only signed uid
> to me though.

Deleting anything is worthless once it's touched the global keyring.
There is no way to issue a 'delete' command to keyrings, and even if
there were, there's no way for keyrings to propogate that command to
local GPG rings.  The only way to successfully take a GPG uid out of
circulation is by appending /more/ information to it that renders it
invalid: a revocation certificate.

Steve Langasek
postmodern programmer

Attachment: pgpWF6jp5UHDo.pgp
Description: PGP signature


Reply to: