Hello folks,

this is not s strict Debian question but it is so small and easy that it's
not worth subscribung to a GPG list for.

Q: How can I remove an email address from my GPG key? I'm changing jobs, so
one of my three addresses won't be valid any more. Do I have to make a new
key pair from scratch? If so, how can my "web of trust" (I don't have one so
this is rather theoretical) be transferred from the old to the new key?

Thanks,
--D.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHnZnRGdM4FB223AcRApyUAJ4hCNpGIL7QRKUNH58lWA RNTpOGOgCfQH7T
SB5zhkMAic3l3UgBwxViV9w=
=8RMf
-----END PGP SIGNATURE-----

Dan H. wrote:
> Hello folks,
>
> this is not s strict Debian question but it is so small and easy that it's
> not worth subscribung to a GPG list for.
>
> Q: How can I remove an email address from my GPG key? I'm changing jobs, so
> one of my three addresses won't be valid any more. Do I have to make a new
> key pair from scratch? If so, how can my "web of trust" (I don't have one so
> this is rather theoretical) be transferred from the old to the new key?

You can revoke identities from your key. 'gpg --edit <the key>' and
then use 'revuid'. Don't forget to save and upload to a keyserver your
modified key afterwards.

/M

--
Magnus Therning (OpenPGP: 0xAB4DFBA4)
magnusï¼therning．org Jabber: magnus．therningï¼gmail．com
http://therning.org/magnus

What if I don't want to obey the laws? Do they throw me in jail with
the other bad monads?
-- Daveman


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHnZvjiMWTaatN+6QRAtuFAJsHkwtUGADkgjieXa8ZCR Y37/18vACcDtCo
T74Ypq+8aHdrS4PF/71Y6xo=
=zQy7
-----END PGP SIGNATURE-----

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 01/28/08 03:09, Magnus Therning wrote:
> Dan H. wrote:
>> Hello folks,
>>
>> this is not s strict Debian question but it is so small and easy that it's
>> not worth subscribung to a GPG list for.
>>
>> Q: How can I remove an email address from my GPG key? I'm changing jobs, so
>> one of my three addresses won't be valid any more. Do I have to make a new
>> key pair from scratch? If so, how can my "web of trust" (I don't have one so
>> this is rather theoretical) be transferred from the old to the new key?
>
> You can revoke identities from your key. 'gpg --edit <the key>' and
> then use 'revuid'. Don't forget to save and upload to a keyserver your
> modified key afterwards.

But will you lose access to any data that you have encrypted under
the old key?

- --
Ron Johnson, Jr.
Jefferson LA USA

"I'm not a vegetarian because I love animals, I'm a vegetarian
because I hate vegetables!"
unknown
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHnaZiS9HxQb37XmcRArSNAKDY1i5BI2Hk9Jcr1UTfAf 5m/dUGaACgrlU7
/F/u8nbsOArAR7N3cKY2BHM=
=kxVi
-----END PGP SIGNATURE-----


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

On Mon, Jan 28, 2008 at 03:54:42AM -0600, Ron Johnson wrote:
> > You can revoke identities from your key. 'gpg --edit <the key>' and
> > then use 'revuid'. Don't forget to save and upload to a keyserver your
> > modified key afterwards.
>
> But will you lose access to any data that you have encrypted under
> the old key?

No, I think the key itself stays valid. It's just the UID.

--D.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHnamfGdM4FB223AcRAj+lAJwOvB+jFvlGdJvjhb+fBa El22C+6ACfbZUM
nyTGDcfOmbzcpHQnfyJ9gcI=
=mTOF
-----END PGP SIGNATURE-----

On Mon, 28 Jan 2008 03:54:42 -0600
Ron Johnson <ron.l.johnson@cox.net> wrote:

Hello Ron,

> But will you lose access to any data that you have encrypted under
> the old key?

All that's changed is one of the "identities" on the public key. The
key itself, and the private key remain unchanged.

The short answer to your question; No, you won't lose access.

--
Regards _
/ ) "The blindingly obvious is
/ _)rad never immediately apparent"

Never much liked playing there anyway
Banned From The Roxy - Crass

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHnbnGSXvR9Iq2E38RAhT6AJ42r4239alwxxIc0zaDZN whBEV4WQCfaX6V
dnVqavHFnZcCraRV8XsxZiE=
=e6DU
-----END PGP SIGNATURE-----

Dan H. <dunno@stoptrick.com>:
>
> Q: How can I remove an email address from my GPG key? I'm changing jobs, so
> one of my three addresses won't be valid any more. Do I have to make a new
> key pair from scratch? If so, how can my "web of trust" (I don't have one so
> this is rather theoretical) be transferred from the old to the new key?

I've been wondering this myself since my old ISP went TU. I've
considered generating a new key and signing it with the old key.
Presumably, that would produce a reliable enough lineage. What's the
right way?

This is probably a faq. Hmm, "aptitude search gnupg-doc"is a hit.


--
Any technology distinguishable from magic is insufficiently advanced.
(*) http://blinkynet.net/comp/uip5.html Linux Counter #80292
- - http://www.faqs.org/rfcs/rfc1855.html Please, don't Cc: me.


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

On Mon January 28 2008, s. keeling wrote:
> > Q: How can I remove an email address from my GPG key? I'm changing jobs,
> > so one of my three addresses won't be valid any more. Do I have to makea
> > new key pair from scratch? If so, how can my "web of trust" (I don't have
> > one so this is rather theoretical) be transferred from the old to the new
> > key?
>
> I've been wondering this myself since my old ISP went TU. I've
> considered generating a new key and signing it with the old key.
> Presumably, that would produce a reliable enough lineage. What's the
> right way?
>
> This is probably a faq. Hmm, "aptitude search gnupg-doc"is a hit.

when you find out, let me know. I screwed up my main key by adding an email
address ( the one for this list). It seems to have taken over the main email
address now, so I obviously did it wrong...


--
Paul Cartwright
Registered Linux user # 367800
Registered Ubuntu User #12459

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQBHnxeBwbfaN8z70z8RAml8AJ9PYO9pPsPneJCVTg7gw1 FJEv6UkgCdFIw7
UwZM13ZPG7FCa7maoImuAwc=
=PZPm
-----END PGP SIGNATURE-----

Dan H. skrev:
> On Mon, Jan 28, 2008 at 03:54:42AM -0600, Ron Johnson wrote:
>>> You can revoke identities from your key. 'gpg --edit <the key>' and
>>> then use 'revuid'. Don't forget to save and upload to a keyserver your
>>> modified key afterwards.
>> But will you lose access to any data that you have encrypted under
>> the old key?
>
> No, I think the key itself stays valid. It's just the UID.
>
> --D.
Yes, only the userid is made unusable if you revoke it. The key is still
valid.
BTW if you revoke a key it is made unusable for encryption, but you can
still use it for decryption.
Per Tunedal


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org