Re: deleting signatures from uids

2006-11-02 Thread Qed
On 10/31/2006 02:58 PM, Stijn Hoop wrote: [..snip..] In a way I can see why; removing signatures from uids seems like it should require a passphrase, however it doesn't work that way. I've also read that it's nearly impossible to remove a key from the keyservers, however that's also not what I

Re: deleting signatures from uids

2006-11-02 Thread Alex Mauer
Qed wrote: This is not a limitation, it'a a feature :-) and this is also the reason why you should not play with PGP on keyservers, the result will be often another abandoned key. Is there any reason that the keyserver needs to continue to redistribute expired, revoked, or otherwise invalid

Re: deleting signatures from uids

2006-11-02 Thread Peter S. May
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alex Mauer wrote: Is there any reason that the keyserver needs to continue to redistribute expired, revoked, or otherwise invalid (e.g. superseded) signatures? I can't think of any. I would think that it's important for keyservers to widely

Re: deleting signatures from uids

2006-11-02 Thread Alex L. Mauer
Peter S. May wrote: I would think that it's important for keyservers to widely distribute the revocation certificates of revoked signatures. Agreed. But it's not important to distribute signatures that have been revoked. If the keyservers simply omitted revoked signatures from search

Re: deleting signatures from uids

2006-11-02 Thread Peter S. May
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alex L. Mauer wrote: Peter S. May wrote: I would think that it's important for keyservers to widely distribute the revocation certificates of revoked signatures. Agreed. But it's not important to distribute signatures that have been

Re: deleting signatures from uids

2006-11-02 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Peter S. May wrote: Again, such is true for the uids themselves. But revocations for uids that the client doesn't have might or might not be considered superfluous. Perhaps we find a revocation for a uid we don't have yet on one keyserver and

deleting signatures from uids

2006-11-01 Thread Stijn Hoop
Hi, I'm almost certain that this is a FAQ but my GoogleFu fails me today so I turn to the mailing list. After a reinstall some weeks ago today I needed my GPG key again, and to my horror I forgot to copy it over. Luckily I found an old backup of my ~/.gnupg and all seemed well after a cleanup of

Re: deleting signatures from uids

2006-11-01 Thread Michael Kallas
Hi, Stijn Hoop schrieb: On the keyservers, there are therefore lots of signatures on my key from others that a) are really not useful anymore or b) that I have never even met (how did those get there!). Fortunately it looks like I can delete those signatures locally with --edit-key and then

Re: deleting signatures from uids

2006-11-01 Thread Johan Wevers
Stijn Hoop wrote: 'delsig'. However I cannot get the keyservers to accept the new key without the useless signatures; they only seem to add new ones (as is evident from the multiple self-signatures now present). Yes, keyservers will merge new signatures with the key but wil not delete

Re: deleting signatures from uids

2006-11-01 Thread Randy Burns
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 - --- Stijn Hoop [EMAIL PROTECTED] wrote: [snip] Am I running into a limitation of the public key server architecture? Yes. Just publish it yourself on a free website. I've done it myself about the simplest way available here: geocities (dot)