basic identity mgmt

[Peter Lebbing]

On 11/01/16 17:35, Lachlan Gunn wrote:
> I actually ran into this issue the other day.  For me it's problematic because
> my certification key is on an offline machine, so it's inconvenient to have to
> power it up and do a round-trip through the airgap when I'm not going to
> propagate the signature anyway.

You can only do an uncommon all-or-nothing change: with --trust-model direct,
you can set key validity directly, just like ownertrust in most other models,
but this means the Web of Trust and certification signatures are completely
unused, AFAIK. I'm not recommending either for or against it, I'm just throwing
it out there as an available option.

This apart from the already mentioned tofu+pgp.

HTH,

Peter.

-- 
I use the GNU Privacy Guard (GnuPG) in combination with Enigmail.
You can send me encrypted mail if you want some privacy.
My key is available at <http://digitalbrains.com/2012/openpgp-key-peter>