Mainkey with many subkeys??

Kristian Fiskerstrand kristian.fiskerstrand at sumptuouscapital.com
Mon Dec 8 16:37:20 CET 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 12/08/2014 04:28 PM, gnupgpacker wrote:
> Hello,
> 
>> -----Original Message----- From: Kristian Fiskerstrand Sent:
>> Monday, December 08, 2014 12:44 PM
>> 
>>> Main key has options SC. There is an active newer signing key
>>> S, so this will be always used for signing?
>> Correct
> 
> Why has the mainkey SC if signing is not used? Are there some
> compatibility reasons?
> 

This key will always be capable of signing by definition, but the
reason it is not C only is that it was not generated with a signing
subkey from the point of key generation, and the difference does not
make any practical difference. Changing this would require a new
self-signature limiting the use flags, but this is not worthwhile to do.


- -- 
- ----------------------------
Kristian Fiskerstrand
Blog: http://blog.sumptuouscapital.com
Twitter: @krifisk
- ----------------------------
Public OpenPGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net
fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3
- ----------------------------
Veni vidi velcro
I came, I saw, I got stuck
-----BEGIN PGP SIGNATURE-----
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=kD/3
-----END PGP SIGNATURE-----



More information about the Gnupg-users mailing list