Netiquette, GPG Keys, Keyservers

[Alexander Dalloz]

Am Mo, den 03.05.2004 schrieb Charles Howse um 11:22:

> First, I have 2 gpg keys out there...search for my email address on 
> http://pgp.mit.edu/
> 
> I've lost the revocation cert for the older key, so I suppose I can't get rid 
> of it...?

I may be corrected, but I think all you need is to remember the
passphrase of the key you want to revoke. See i.e.

http://www.rediris.es/cert/servicios/keyserver/remove.en.html
http://www.cryptnet.net/fdp/crypto/gpg-party.html#ss3.7
http://www.nmlug.org/faqs/gen-gpg-key.html

> Second, what is the accepted way of making it easy for someone reading my 
> signed email to import my key from the keyserver?
> Should I post the fingerprint or id in my sig?

In my opinion that would be helpful. People using GPG/PGP should then be
able to locate your public key on the keyserver and import it to the own
keyring for verification. And of course, the recommended way to publish
your public key is to put in on the keyserver.

> Charles Howse

Alexander


-- 
Alexander Dalloz | Enger, Germany | GPG key 1024D/ED695653 1999-07-13
Fedora GNU/Linux Core 1 (Yarrow) on Athlon CPU kernel 2.4.22-1.2188.nptl
Sirendipity 14:22:16 up 6 days, 13:10, load average: 0.50, 0.28, 0.15 
                   [ Γνωθι σ'αυτον - gnothi seauton ]
             my life is a planetarium - and you are the stars
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: Dies ist ein digital signierter Nachrichtenteil
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20040503/3f1c136e/attachment-0001.sig>