Detection of a revocation certificate prior to import

Werner Koch wk at gnupg.org
Tue Apr 12 14:46:55 CEST 2016


On Sat,  2 Apr 2016 11:16, ludwig at enigmail.net said:

> is it possible to identify a revocation certificate prior to import?

No.  If there is a revocation certificate availabale it needs to be
applied ASAP.  If you refresh a key a revocation certificate would be
imported anyway.

If you want to protect against accidental import you may do what GnuPG
does:

--8<---------------cut here---------------start------------->8---
To avoid an accidental use of this file, a colon has been inserted
before the 5 dashes below.  Remove this colon with a text editor
before importing and publishing this revocation certificate.

:-----BEGIN PGP PUBLIC KEY BLOCK-----
--8<---------------cut here---------------end--------------->8---


Salam-Shalom,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.




More information about the Gnupg-devel mailing list