Re: Replacement GPG key for Lorenzo Stoakes

--pj2py4cj3roolq3g
Content-Type: text/plain; protected-headers=v1; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Subject: Re: Replacement GPG key for Lorenzo Stoakes
MIME-Version: 1.0

Hello Konstantin,

On Wed, Apr 22, 2026 at 09:39:13AM -0400, Konstantin Ryabitsev wrote:
> On Wed, Apr 22, 2026 at 11:19:36AM +0200, Uwe Kleine-K=F6nig wrote:
> > > > So to establish the required trust, I had the new key signed by peo=
ple with
> > > > the requisite level of trust. I attach the key here.
> > > >=20
> > > > Could you please remove the old and replace it with the new?
> > >=20
> > > Done now. Thanks!
> >=20
> > I see you removed the old key from Lorenzo. I wonder if it would make
> > sense to add the revoked key instead of deleting it to spread the
> > information that it shouldn't be used any more.
>=20
> If the key is lost, then this serves very little practical purpose, beyond
> advertising that the old encryption subkey should not be used. Since we a=
lmost
> never use encryption anyway (just attestation), then this is just effort =
for
> very little gain.

The effort however is also very low, it's just:

gpg --import revoked.asc
{
  gpg --list-options show-notations,no-show-uid-validity --with-subkey-fing=
erprints --list-key C52D7AFE85F25509;
  gpg -a --export --allow-weak-digest-algos --allow-weak-key-signatures --e=
xport-options export-attributes,export-clean C52D7AFE85F25509;
} > keys/C52D7AFE85F25509.asc
git commit -m 'Add revoked key C52D7AFE85F25509 (Lorenzo Stoakes)' keys/C52=
D7AFE85F25509.asc

Distributing the revokation also has the advantage that if someone
wonders why they see an attestation from Lorenzo using a new key, the
revokation gives a good additional indication that the new key is
legitimate.

Best regards
Uwe

--pj2py4cj3roolq3g
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQEzBAABCgAdFiEEP4GsaTp6HlmJrf7Tj4D7WH0S/k4FAmnpRwoACgkQj4D7WH0S
/k7aeQf+IWEoFZp4UqwQxpG2kL11IANLw88Y4TYfyioQpE4GLK+HYblZecB5/9zT
7QR3r0we+TfrENst0BLBEMUIoPcY3EXFMkD3tM1/olFAhaKB+r++gb+TndBEzyyu
pcpppfmCAXfTlh5R8/cLyEcTvDBKDm1S4lVHtyUDq1/a/1Yo+T3Ufr/KgOcby3dH
QErH0BrU3KaS7KfzmN02Jf6jl9foE+9U51dHQtLChFiDVGvN/A4s/4MN0QN3VGiZ
BZ3AE9lvMIwkBkKA0XWq0NFxWxsiXqpV8IdlrZvjC628bwORYGbnGWoTQ+wu3uHZ
INNIBrkh9QK0DCM+nZ+dP9gh32b1Dw==
=Sj5j
-----END PGP SIGNATURE-----

--pj2py4cj3roolq3g--