Mainkey with many subkeys??

Kristian Fiskerstrand kristian.fiskerstrand at sumptuouscapital.com
Sun Dec 7 22:16:29 CET 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 12/07/2014 10:11 PM, Doug Barton wrote:
> On 12/7/14 7:04 AM, Tomo Ruby wrote: | I wanted to create new keys
> and came across the following | "problem": If I create a main key
> to certify and subkeys for | everything else, won't there be dozens
> of subkeys on my main key | after years of creating and revoking
> subkeys??
> 
> Why do you believe that you will be creating and revoking so many
> subkeys?
> 

Easiest example of this would probably be per-device signing keys and
cellphone substitution. Although in my experience the number of
subkeys are increasing more due to expiration of encryption subkeys
and key rotation.

Tomo: you'll find that my key have a few subkeys at least due to these
practises. It doesn't provide any issue for either keyservers or to
use more generally, but you are correct in that the information is
retained.

- -- 
- ----------------------------
Kristian Fiskerstrand
Blog: http://blog.sumptuouscapital.com
Twitter: @krifisk
- ----------------------------
Public OpenPGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net
fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3
- ----------------------------
Ab esse ad posse
- From being to knowing
-----BEGIN PGP SIGNATURE-----
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=Gj8B
-----END PGP SIGNATURE-----



More information about the Gnupg-users mailing list