mailto with pgp fingerprint
Alexander Reiter
leckse at leckse.net
Fri Jul 25 15:27:20 CEST 2014
MFPA wrote:
> If I recall correctly, PGP's keyserver "PGP Global Directory" sends an
> email to each email address in the uids when a key is submitted, and
> only lists those uids whose email address replies. It re-sends these
> verification emails every six months, and deletes keys if there is no
> reply. It also allows anybody with access to your email address to
> delete your key and upload a different one, according to Wikipedia
> [0].
"Instead of revoking your key, simply remove it from the directory."
-- PGP Global Directory Frequently Asked Questions (FAQ)
Meaning that gpg --keyserver ldap://keyserver.pgp.com --refresh-keys
would result in unchanged keys, even if I had revoked them.
More information about the Gnupg-users
mailing list