mailto with pgp fingerprint

Alexander Reiter leckse at leckse.net
Fri Jul 25 15:27:20 CEST 2014


MFPA wrote:
> If I recall correctly, PGP's keyserver "PGP Global Directory" sends an
> email to each email address in the uids when a key is submitted, and
> only lists those uids whose email address replies. It re-sends these
> verification emails every six months, and deletes keys if there is no
> reply. It also allows anybody with access to your email address to
> delete your key and upload a different one, according to Wikipedia
> [0].

"Instead of revoking your key, simply remove it from the directory."
   -- PGP Global Directory Frequently Asked Questions (FAQ)

Meaning that gpg --keyserver ldap://keyserver.pgp.com --refresh-keys
would result in unchanged keys, even if I had revoked them.





More information about the Gnupg-users mailing list