Revoked keys on keyservers
David Shaw
dshaw@jabberwocky.com
Fri Oct 19 00:25:02 2001
--TybLhxa8M7aNoW+V
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Wed, Oct 17, 2001 at 02:33:16PM +0100, Dave Ewart wrote:
> > I also have a couple of keys that are still active, but I don't use
> > them; they were for testing. Unfortunately, I never generated
> > revocation certs for these keys, and I no longer have the secret keys.
> > Is there anyway to remove these keys from the servers? In the future,
> > I'll make off-site backups and revoke certs ASAP... even when playing
> > around.=20
>=20
> Removing stuff from the servers is not usually possibly. Anyway, if you
> no longer have the secret keys, nor revocation certificates, how can you
> prove that they are _yours_?
A while ago there was some brief discussion on the keyserver manager
list about the idea of aging keys off of the keyservers. Basically,
any key that didn't get refreshed after a few years would just get
dropped from the server. The rationale was that it was the
responsibility of the key owner to keep the key out there, and if they
didn't then the server could save the space.
It does have the nice feature that all those keys that can't get
revoked would eventually go away.
As far as I recall, the idea was never implemented.
David
--=20
David Shaw | dshaw@jabberwocky.com | WWW http://www.jabberwocky.com/
+--------------------------------------------------------------------------=
-+
"There are two major products that come out of Berkeley: LSD and UNIX.
We don't believe this to be a coincidence." - Jeremy S. Anderson
--TybLhxa8M7aNoW+V
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org
iQEVAwUBO89WUIccwqs8s7QVAQFOdwf/cqGCN7sfYER7afvze+BTcsjNOubwv2G2
Kl/TSAlEx9ru/r3PxwfmvBu2Awyr2qEwrI71Nw4orqmeNSBfnLWRx7cNdcZAMkBC
ldz1ihNPyaAR07q+PQsOC+rQgJG422C5Qb6JGkQopxfMKXWHcjYTboBEqeHY1Iw5
Z7LHhhovYWyAD5UFWe7KrxE+eIu8/f3crOdPBF3gWDFPdopfulQVsx8S9pchcymN
V+fHBzoKcgMmXOrtfRNYIdrKGBagqfow2q3/4txxxQ9mvewDtFhow5QCBBrXBDR1
bMveL3cFKKkwWaEwMIh57Ip7kAVzTbtg84jq3eK0xAV1QaJYwuWgwg==
=YjvU
-----END PGP SIGNATURE-----
--TybLhxa8M7aNoW+V--