Re: GD doesn't always accept revocations
David Shaw <[email protected]> Wed, 9 Feb 2005 15:07:58 -0500
| Newsgroups | gmane.comp.encryption.pgp.keyserver-folk,gmane.comp.gnu.gnupg.users |
|---|---|
| Message-ID | <[email protected]> |
On Wed, Feb 09, 2005 at 03:01:11PM -0500, Jason Harris wrote: > On Wed, Feb 09, 2005 at 02:53:58PM -0500, David Shaw wrote: > > On Wed, Feb 09, 2005 at 02:33:19PM -0500, Jason Harris wrote: > > > > It seems the GD doesn't always accept revocations for keys it stores: > > > > Note that the key is returned from keyserver-beta.pgp.com > > > _without its revocation_: > > > > https://keyserver-beta.pgp.com/vkd/VKDHelpPGPCom.html : > > > > Can I post a revoked key to the PGP Global Directory? > > > > No. The PGP Global Directory includes many features to prevent it > > from being filled with unusable keys. One of these features is that > > the directory does not support revoked keys. Instead of revoking > > your key, simply remove it from the directory. > > > > In short, it's a feature. I'm not sure I completely like that > > feature, but nevertheless, the GD is operating as intended. > > Revoked keys are supposed to be _removed_ from the GD, period. Supposed to by whose say-so? Period or what? I'll repeat the quote from the GD: Can I post a revoked key to the PGP Global Directory? No. The PGP Global Directory includes many features to prevent it from being filled with unusable keys. One of these features is that the directory does not support revoked keys. Instead of revoking your key, simply remove it from the directory. They don't do it. They even document their not doing it. You might suggest it to them as a feature, but they don't do it now. I'm not saying I think this is optimal behavior, but the documentation is pretty clear on this point. David