Many more sigs show when I add --with-colons to --list-sigs

[Robert J. Hansen]

> I've got some 10's later on with my self-signatures for my newer
> rsa4096 keys.

Unless you're looking to write a GnuPG output parser, I suggest not even
looking at the machine-readable output. There's nothing useful to you there.

10 is a SHA512 signature, JFYI. But please, there's nothing for you there.

> If in fact the vast majority of signatures on my key are invalid
> because of SHA-1, and most of my signatures are also invalid, I'm
> wondering if it might make sense to start fresh with a new key that
> doesn't have all that potentially confusing old baggage.
The best time to migrate away from DSA keys was in the year 2000, when
the RSA patent was relinquished. The second best time is now.

Seriously: I don't mean to be a jerk, but you're 26 years late to the party.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20260729/7a6a4fbc/attachment.sig>