rm ~/.gnupg/secring NOW!
Hi guys!
Heads up:
If you have ever generated or imported a gpg secret key using gpg 1 or 2.0
(ie, before Stretch), then used --delete-secret-key, please
rm ~/.gnupg/secring.gpg
(and shred/trim/balance/etc -- it's a huge topic).
If you --delete-secret-key with gpg 2.1, it deletes the key only from its
own copy but leaves the gpg 1/2.0 copy intact. Querying it with
--list-secret-keys doesn't reveal that the key is still there, either.
But, if you rm .gpg-v21-migrated, that "deleted" key is back.
Yay if you cross a border, have your disk seized or imaged, or share the
machine. Double yay if you had it imaged in the past.
Meow!
--
⢀⣴⠾⠻⢶⣦⠀ What Would Jesus Do, MUD/MMORPG edition:
⣾⠁⢰⠒⠀⣿⡁ • multiplay with an admin char to benefit your mortal
⢿⡄⠘⠷⠚⠋⠀ • abuse item cloning bugs (the five fishes + two breads affair)
⠈⠳⣄⠀⠀⠀⠀ • use glitches to walk on water
Reply to: