OT: Revoking Old Keys... my problem

[Greg Sabino Mullane]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 
 
> Just remember that you can't store the revocation certificate in
> an encrypted form, so anybody hacking your webmail account
> (or any sysadmin...) could revoke your key.
 
Of course you can encrypt it. It's just a file like any other, so
just "gpg -ca" and then you can store it anywhere you like, where
you at least have the additional barrier of another password to
learn before the revocation cert can be used.
 
I'd personally rather leave a copy with a friend rather than an
online web mail service, but either way please encrypt it first.
You could even leave the password to open it with a second friend.
 
- --
Greg Sabino Mullane greg at turnstep.com
PGP Key: 0x14964AC8 200405060713
 
-----BEGIN PGP SIGNATURE-----
 
iD8DBQFAmh49vJuQZxSWSsgRAtUsAJsHhqxX95068S2rLxpwCjl5UZ46HQCfTtaq
7F8F6/8kOLMwXo1Fetu7hT8=
=4X1K
-----END PGP SIGNATURE-----