Mainkey with many subkeys??

Kristian Fiskerstrand kristian.fiskerstrand at sumptuouscapital.com
Sat Dec 13 15:22:17 CET 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 12/13/2014 02:41 PM, Peter Lebbing wrote:
> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
> 
> On 08/12/14 16:37, Kristian Fiskerstrand wrote:
>> This key will always be capable of signing by definition
> 
> In what sense is that? It seems GnuPG is not letting me sign data
> with a certify-only key:

But you could always generate a new self-signature giving it signing
capability. But anyhow, that is a digression, the point remains that a
spare S capability does no harm to the security of the key.

- -- 
- ----------------------------
Kristian Fiskerstrand
Blog: http://blog.sumptuouscapital.com
Twitter: @krifisk
- ----------------------------
Public OpenPGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net
fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3
- ----------------------------
"If you choose to sail upon the seas of banking, build your bank as
you would your boat, with the strength to sail safely through any storm."
(Jacob Safra (1891–1963))
-----BEGIN PGP SIGNATURE-----

iQIcBAEBCgAGBQJUjEuXAAoJEPw7F94F4TagmWMP/3HPvVFVT4z6eSHrD3lv6/04
AimNwBp4a5E7po1yHL1+UFJDcow44K/ZmdL4isVP918NcfO+DNaTwN98QA7BCxRb
Pj+F/vt4j2Tg+qUCM4RX/nirZQxMVxeRITLRjeG1ptKOKBiLFd+/8N+SVynM1k2u
5iv8taLCBXCRBJQjvGrW7bzWZoL8B1grJvGWOFFnX91zpAvmQJrnQ9/5f/M6otlY
tjq8gGf12WAVS+YotcBtkLs3MQxTzCGWH5EFam/pbnKpfqzGPelKd2BFyFAA45kF
GmVaOjv3DUnGpYIRqbciDnOdeEIxVJNiaKNgqB0pC0psavpqm94+juqlAy/xsiKr
/TIcxWw+BHnq3azRnfcHX6QaXPqI3EtLGftEUSr5wYVOfr3lEJ+XhLiYQBT5lmlk
ZNb3ncV2Sg1i5MvqgTgH9k11tq/uv0OmsCyVPuD7set5LGAbknfiLaODFd1NwRYh
BrNj2FIyCQ4Knj/Qk0fSrQnk9fqYYi0F3XlrLbL5nARRVx1dxPSo/ZlCi+wnF5cF
UoOOso1Fho4fER9o6S3xYb8s/QcOlpDiaJhvbHc+Xi0wcpIIPU/QQNbpzps9mGkh
dwWNHjrSxChonur75zTlSUGadzJsVYy5WKV38jXSVL31dkLP5NgcNxroRyrPPina
qgBcio7etspFtTqXnNtE
=kLI/
-----END PGP SIGNATURE-----



More information about the Gnupg-users mailing list