MFPA wrote:
> If I recall correctly, PGP's keyserver "PGP Global Directory" sends an
> email to each email address in the uids when a key is submitted, and
> only lists those uids whose email address replies. It re-sends these
> verification emails every six months, and deletes keys if there is no
> reply. It also allows anybody with access to your email address to
> delete your key and upload a different one, according to Wikipedia
> [0].

"Instead of revoking your key, simply remove it from the directory."
   -- PGP Global Directory Frequently Asked Questions (FAQ)

Meaning that gpg --keyserver ldap://keyserver.pgp.com --refresh-keys
would result in unchanged keys, even if I had revoked them.



_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Reply via email to