Re: Replacement GPG key for Lorenzo Stoakes

Konstantin Ryabitsev <[email protected]> Wed, 22 Apr 2026 09:39:13 -0400
Newsgroups org.kernel.linux.keys
Message-ID <20260422-glaring-gainful-puffin-402e41@meerkat>
On Wed, Apr 22, 2026 at 11:19:36AM +0200, Uwe Kleine-König wrote:
> > > So to establish the required trust, I had the new key signed by people with
> > > the requisite level of trust. I attach the key here.
> > > 
> > > Could you please remove the old and replace it with the new?
> > 
> > Done now. Thanks!
> 
> I see you removed the old key from Lorenzo. I wonder if it would make
> sense to add the revoked key instead of deleting it to spread the
> information that it shouldn't be used any more.

If the key is lost, then this serves very little practical purpose, beyond
advertising that the old encryption subkey should not be used. Since we almost
never use encryption anyway (just attestation), then this is just effort for
very little gain.

-K