How to remove 'unwanted' sig from my public key?

David Shaw dshaw@jabberwocky.com
Fri Oct 5 20:05:02 2001


--uAKRQypu60I7Lcqm
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Fri, Oct 05, 2001 at 02:24:14PM +0100, Dave Ewart wrote:

> My public has been signed by someone I don't know - I emailed the person
> in question and they had no idea why they had signed it, and apologised
> for the mistake.
>=20
> How can I go about removing this signature from the copy of my key that
> is on the keyservers? This key is also signed by other signatures that
> I wish to keep.
In short, you can't. What you can do is ask this person to issue a revocation for their signature, which while it will not remove their signature from your key, will render it useless. Once a key hits the keyservers, it is effectively permanent. You would have to delete it off of every known keyserver, and even then a copy may pop up in the future if someone resyncs a keyring with a copy of your key on it. OpenPGP has a notion of a "only owner may modify" flag so keyservers will only accept updates from the key owner (presumably the key server update would be signed by the key in question). Most keyservers don't support this flag yet, but GnuPG does set it (in fact there is no way to unset it). David --=20 David Shaw | dshaw@jabberwocky.com | WWW http://www.jabberwocky.com/ +--------------------------------------------------------------------------= -+ "There are two major products that come out of Berkeley: LSD and UNIX. We don't believe this to be a coincidence." - Jeremy S. Anderson --uAKRQypu60I7Lcqm Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iQEVAwUBO7310Yccwqs8s7QVAQEJcggApyNT7O/aoZxpnEjGH7hU4VctIPGreACb 4VS0SoqNt5tv9SFSmzWiL/1fusRHsxHzETKUfzY50OcsO7fwY0VKdnuO4NwjSj35 oycC2ipqLNW2Men3wJdHRuZZlGbXggo/TfCqZk5rgxgq3hry/ocPV5w+S01IFUia 5AyLPHOqwEtFkkJS1pRUCanIWFu+u+VSIzJCCVzS3p+YHaiRhfUFoafmnx2wllKO PRGSzdK2lDJx9HG/iYmwS6nhxkmwogPhmxfPCZN2cVPjX3GZFiiaIruxv+efvVnh t2fPyD7eDqX4RdnIhTAg+uuMYNe7XQEgwo+dx6AtYrAshN9qksrskQ== =u/Hi -----END PGP SIGNATURE----- --uAKRQypu60I7Lcqm--