Re: Revoking a subkey

On Tue, Jun 25, 2024 at 10:18:08AM -0400, Konstantin Ryabitsev wrote:
> On Mon, Jun 24, 2024 at 09:59:18PM GMT, Joel Granados wrote:
> > Hello
> > 
> > I'm looking to replace one of my subkeys with a new one. I have one that
> > is E and another that is A. My third one is SEA and I want to just
> > have it as a signature key to avoid the annoying situation where there
> > is no consistency in the use of my encryption keys. Unfortunately I have
> > not found documentation or precedent on how to do this for the kernel
> > 
> > Does anyone see an issue with me just:
> > 1. Revoking my SEA subkey
> > 2. Creating a new S subkey
> 
> You can also just use gnupg's "change-usage" to drop E and A capabilities on
> that subkey. This would be slightly better because this won't require everyone
> relying on your signatures to update their keyring. See the manpage for gpg.
> 
This is way better than the revocation. I'll give this a try.

> > 3. Updating my key through this list
> 
> There are no technical reasons why this wouldn't work, but there will still be
> a long tail end of people using your SEA key for encryption because their
> keyring just never gets updated.
Indeed. Its good that I don't receive much of those :)

Thx for the help!
Very much appreciated.

Best

-- 

Joel Granados