[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: GPG Key question



Hi Steve!

On Mon, 17 Jun 2002, Steve Langasek wrote:

> On Mon, Jun 17, 2002 at 10:53:19PM -0400, B. L. Jilek wrote:
> > Hi Stephen!
> 
> > On Mon, 17 Jun 2002, Stephen Stafford wrote:
> 
> > > On Tue, Jun 18, 2002 at 12:07:56AM +0200, Rene Engelhard wrote:
> > > > Paul Cupis wrote:
> > > > >                  Present  a  menu which enables you to do all key
> > > > >                  related tasks:
> > > > > 
> > > > >                  revsig    Revoke a signature.   GnuPG  asks  for
> > > > >                            every signature which has been done by
> > > > >                            one of  the  secret  keys,  whether  a
> > > > >                            revocation  certificate should be gen
> > > > >                            erated.
> 
> > > > > So it looks like you can generate a revokation certificate for a particular 
> > > > > signature.
> > > >   ^^^^^^^^^
> 
> > > > Yes, you can revoke a _signature_. But that was not the question. He
> > > > wanted to remove one of his _uid_'s. And that is *not* possible.
> 
> > > > Rene
> 
> > > Sure it is.  It has *exactly* the effect of removing the UID.  The UID
> > > remains, but is clearly marked as being revoked.  This should tell everyone
> > > that the UID is no longer to be associated with the key.  This is The
> > > Correct Way to remove stale UIDs AFAIK.
> 
> > Actually you can delete the uid.  It will not show up on the key.
> > If you don't have any other uid you will have to create a new one.
> 
> > I would delete it.  It don't look like it's the only signed uid
> > to me though.
> 
> Deleting anything is worthless once it's touched the global keyring.
> There is no way to issue a 'delete' command to keyrings, and even if
> there were, there's no way for keyrings to propogate that command to
> local GPG rings.  The only way to successfully take a GPG uid out of
> circulation is by appending /more/ information to it that renders it
> invalid: a revocation certificate.
> 

You have a point there.  Was not thinking of the key servers.


-- 
B. L. Jilek <bljilek@yahoo.com>
PGP keys on my website --> http://crowbyte.dnsalias.com/~tcrow/
Linux user: 163800 | Debian Rules! | Slackware Rocks!
-----------------------------------------------------------

Attachment: pgpDDpKSrUOLa.pgp
Description: PGP signature


Reply to: