decrypt : primary key or subkey ?

[Bruno Costacurta]

On Thursday 07 June 2007 17:32:08 Charly Avital wrote:
> Bruno Costacurta wrote the following on 6/7/07 1:31 PM:
> [...]
>
> > Hello David,
> >
> > (note: I'm able to revoke this subkey (done but not sent to keyserver
> > yet)).
> >
> >[...]
>
> Bruno,
>
> I have just downloaded (again) your key now, and it looks like:
>
> pub  1024D/2E604D51  created: 2006-06-11  expires: never       usage: SC
>                      trust: unknown       validity: unknown
> This key was revoked on 2007-06-07 by DSA key 2E604D51 Bruno Costacurta
> <bruno at costacurta.org>
> sub  2048g/0CC897B5  created: 2006-06-11  revoked: 2007-06-07  usage: E
> [ unknown] (1). Bruno Costacurta <bruno at costacurta.org>
> [ revoked] (2)  pubmb01 <pubmb01 at skynet.be>
> [ revoked] (3)  pubmb02 <pubmb02 at skynet.be>
> [ revoked] (4)  Bruno Costacurta <cob1 at biz.tiscali.be>
> [ unknown] (5)  Bruno Costacurta <pubmb01 at skynet.be>
> [ unknown] (6)  Bruno Costacurta <contract at costacurta.org>
>
> It would seem that you have revoked both the primary key and the subkey.
>
> I *believe*, but I am not sure, that you could have revoked *only* the
> subkey, and generated a new subkey in its stead. That would have kept
> your primary key "alive", with a new subkey, hopefully valid for
> encryption to you.
>
> I might be wrong, but I believe that in the present situation,
> generating a new E subkey will not resuscitate your primary key.
>

(sorry for delays. I was off and abroad).

Correct. But at least the revoked key will not be used anymore for future 
encryption I cannot decrypt. And future sender will use a valid encryption / 
decyption setup.


> I hope you get more definite opinions from other forum subscribers.
>
> Regards,
> Charly
>
>
>
>
>
>
> _______________________________________________
> Gnupg-users mailing list
> Gnupg-users at gnupg.org
> http://lists.gnupg.org/mailman/listinfo/gnupg-users



-- 
PGP key ID: 0x2e604d51
Key : http://www.costacurta.org/keys/bruno_costacurta_pgp_key.html
Key fingerprint = 713F 7956 9441 7DEF 58ED  1951 7E07 569B 2E60 4D51
--
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : /pipermail/attachments/20070613/368d6687/attachment-0001.pgp