Re: Revoking a subkey

On Mon, Jun 24, 2024 at 09:59:18PM GMT, Joel Granados wrote:
> Hello
> 
> I'm looking to replace one of my subkeys with a new one. I have one that
> is E and another that is A. My third one is SEA and I want to just
> have it as a signature key to avoid the annoying situation where there
> is no consistency in the use of my encryption keys. Unfortunately I have
> not found documentation or precedent on how to do this for the kernel
> 
> Does anyone see an issue with me just:
> 1. Revoking my SEA subkey
> 2. Creating a new S subkey

You can also just use gnupg's "change-usage" to drop E and A capabilities on
that subkey. This would be slightly better because this won't require everyone
relying on your signatures to update their keyring. See the manpage for gpg.

> 3. Updating my key through this list

There are no technical reasons why this wouldn't work, but there will still be
a long tail end of people using your SEA key for encryption because their
keyring just never gets updated.

-K