User Ids without email address (was: Re: Revocation of a user id?)
Ingo Klöcker
ingo.kloecker@epost.de
Sun Mar 23 14:40:01 2003
--Boundary-02=_VJaf+YlxgAiWPZb
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Description: signed data
Content-Disposition: inline
On Friday 21 March 2003 23:49, David Shaw wrote:
> On Fri, Mar 21, 2003 at 10:50:30PM +0100, Volker Augustin wrote:
> > Secondly, what are the implications of this? Does this break my
> > signature on other peoples keys? And does this mean that other
> > peoples signatures on that user id can no longer be used by third
> > people to establish a key chain to my key? (which would implicate
> > that this user id should simply not be used going forward but
> > signatures made to it or signatures made by it still remain valid).
>
> Trust is chained via user IDs, so if you have multiple user IDs, and
> a person signed them all, if you revoke one it does not matter from
> the perspective of that person. If the person only signed one user
> ID, and you revoke that one, then the chain stops that that point.
So in order to avoid the loss of trust chains because of no longer used=20
resp. lost email addresses it seems to make sense to add a user id=20
without email address to each key. This user id will always be valid=20
unless one changes his name, e. g. because of marriage. But even then=20
the user id could still be considered as valid; maybe people who=20
consider changing their name in case of marriage should add a comment=20
like "birthname" to this user id.
Are there reasons not to add a user id without email address?
Regards,
Ingo
--Boundary-02=_VJaf+YlxgAiWPZb
Content-Type: application/pgp-signature
Content-Description: signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iD8DBQA+faJVGnR+RTDgudgRAjcCAJ92gJIg+NyhwTh2xr9TGkIQWeWg2wCeJlQ3
gJKj2yzEEi8XGuzavrjGs4Q=
=lPg6
-----END PGP SIGNATURE-----
--Boundary-02=_VJaf+YlxgAiWPZb--