gnupg and subkeys

Werner Koch wk@gnupg.org
Tue Jan 7 22:10:02 2003


On 07 Jan 2003 21:03:58 +0100, Adrian 'Dagurashibanipal' von Bidder said:

> [replies please only to one of the mailing lists]

That's what "Mail-Followup-To: gnupg-users@gnupg.org" would be used for.

>  * subkey creation: should offer to expire the subkey at the same time
> as the primary, if the primary has an expiry date set. (To discuss:

Not required: An expired primary key renders the subkey unusable
because the primary key is used to bind the subket onto the primary.  

>  * secret key merging: I'd consider this one a bug and not just a ui
> inconvenience:
....
> where testuser.c is the crippled and testuser.s the full secret key.

I don't understand this.

>  * subkey eyports: (ok, this one is really just a whishlist item): Much
> shuffling around with exported keys and re-importing them could be
> avoided if the above bug was fixed and 
> $ gpg --export-secret-[sub]key <subkeyid>! 
> would export a stripped down version of the secret key containing only
> the primary [dummy] key and the specified subkey.

That makes sense. 


Salam-Shalom,

   Werner