Re: Is it possible to remove capabilities from an existing key?

2013-09-12 Thread Philip Jägenstedt
On Thu, Sep 12, 2013 at 12:16 AM, Hauke Laging mailinglis...@hauke-laging.de wrote: Am Mi 11.09.2013, 23:42:30 schrieb Philip Jägenstedt: My public key has the default capabilities sign and certify. I've seen that some people have only the certify capability in order to be able to keep the

Re: Is it possible to remove capabilities from an existing key?

2013-09-12 Thread Hauke Laging
Am Do 12.09.2013, 14:53:29 schrieb Philip Jägenstedt: what I'm actually considering is how to remove the private master key from my laptop, so that if it's lost/stolen I only need to revoke the subkeys. gpg --armor --export-secret-keys $mykeyid key.secret-mainkey.asc gpg --armor

Is it possible to remove capabilities from an existing key?

2013-09-11 Thread Philip Jägenstedt
My public key has the default capabilities sign and certify. I've seen that some people have only the certify capability in order to be able to keep the main key offline most of the time. Is it technically possible to change the capabilities of an existing key, even if there's no way to do it via

Re: Is it possible to remove capabilities from an existing key?

2013-09-11 Thread Hauke Laging
Am Mi 11.09.2013, 23:42:30 schrieb Philip Jägenstedt: My public key has the default capabilities sign and certify. I've seen that some people have only the certify capability in order to be able to keep the main key offline most of the time. It's of limited use to make a former online mainkey

Re: Is it possible to remove capabilities from an existing key?

2013-09-11 Thread Daniel Kahn Gillmor
On 09/11/2013 05:42 PM, Philip Jägenstedt wrote: My public key has the default capabilities sign and certify. I've seen that some people have only the certify capability in order to be able to keep the main key offline most of the time. Is it technically possible to change the capabilities