DELETE_KEY for stub

NIIBE Yutaka gniibe at fsij.org
Thu Mar 17 00:24:04 CET 2016


On 03/17/2016 01:57 AM, Werner Koch wrote:
> On Wed, 16 Mar 2016 04:00, gniibe at fsij.org said:
> 
>> For the latter, I think that it should be supported.  Are there any
>> reasons to inhibit this?  I mean, is it OK to apply following patch?
> 
> I think it makes sense to delete the shadow key on user requests
> (--delete-key).  After all it is just a convenience thing and does not
> carry important information.

Yes.  I think that it's just OK to remove it when asked (it's easily
regenerated automatically given a user has the card).  I'm going to
push the change of gpg-agent as a first step, as I don't think it
makes sense for gpg-agent to inhibit the removal.

I'll support deleting the shadow key by --delete-key.  Please note
that this is another issue.

In the context of moving secret key from a card to another, the issue
is deleting the shadow key (the connection between key and the
particular card), itself.

A user wouldn't want to remove entire GPG key in this case.
-- 



More information about the Gnupg-devel mailing list