Sign key and export for each UID
expires2013 at ymail.com
Thu Sep 19 01:14:03 CEST 2013
-----BEGIN PGP SIGNED MESSAGE-----
On Monday 16 September 2013 at 9:20:45 PM, in
<mid:CA+4dSw6Ct3buQPp-04+37O0bfCF6XAQOZvFh+xEhayWg3kFtAg at mail.gmail.com>,
Pete Stephenson wrote:
> I consider UIDs
> corresponding to no-longer-functioning email addresses
> to be invalid and won't sign them as I have no idea if
> the keyholder is the actual owner of that address.
Doesn't the CAFF method (emailing the key with your signature on just
one uid in an encrypted message to the email address in that uid) take
care of that for you? Unless the same person has access to
both the secret key and the email address, they don't have access to
your signature on that uid.
MFPA mailto:expires2013 at ymail.com
Live your life as though every day it was your last.
-----BEGIN PGP SIGNATURE-----
-----END PGP SIGNATURE-----
More information about the Gnupg-users