Revocation key

[John Abreau]

David Kramer <david at thekramers.net> writes:

> So let's say I create a revocation key, and later my david at thekramers.net
> becomes compromised.  How do I use the revocation key?
> 
> As a side question, if I have a pgp key for an email address at a previous
> company, there's no way to get rid of it, right?

I assume you would send the revocation certificate to the keyservers the
same way you'd send your key.

As for deleting an old key, that question came up a couple of times at
the meeting, and the response I remember was essentially that you can't
delete keys, that revoking the key is the closest equivalent to deleting
it.

Matt mentioned that if you have multiple uids on a key, you can revoke
just your self-signature on one of the uids, which flags it as no longer 
valid.

-- 
John Abreau / Executive Director, Boston Linux & Unix 
ICQ 28611923 / AIM abreauj / JABBER jabr at jabber.org / YAHOO abreauj
Email jabr at blu.org / WWW http://www.abreau.net / PGP-Key-ID 0xD5C7B5D9
PGP-Key-Fingerprint 72 FB 39 4F 3C 3B D6 5B E0 C8 5A 6E F1 2C BE 99


-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 344 bytes
Desc: not available
URL: <http://lists.blu.org/pipermail/discuss/attachments/20011220/51799bc9/attachment.sig>