Renewal of revocation certificate required after adding a new identity?

Peter Lebbing peter at digitalbrains.com
Mon Oct 13 18:40:06 CEST 2014


On 13/10/14 18:33, Peter Lebbing wrote:
> PS: You could nitpick about "bound to the fingerprint", I think it
> should be "bound to the public key itself". But it makes no real
> difference, I'm just being fussy.

In fact, I think it is more informative to think of it being bound to
the fingerprint, even though this is not true. The fingerprint
corresponds one-to-one to the public key for all practical purposes, and
the revocation certificate is bound to the public key. However, "public
key" is ill-defined without context. It can also refer to the whole
thing with UID's and signatures and so on, which is not what I mean in
this context.

So, yes, the revocation certificate is on the fingerprint ;).

HTH,

Peter.

-- 
I use the GNU Privacy Guard (GnuPG) in combination with Enigmail.
You can send me encrypted mail if you want some privacy.
My key is available at <http://digitalbrains.com/2012/openpgp-key-peter>



More information about the Gnupg-users mailing list