[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: PGP: pgp -ke

Hi.

A signature on a key is a cryptographic signature of the key and
userid.  Therefore, you cannot remove your userid from the key and
hope to keep the signatures valid.

The other problem is that once other people have your userid on your
key, which is neccessary for them to sign it, then you need to have
them remove it, too, etc.

Basically, signatures and userids currently act like viruses...  Once
they escape, its nearly impossible to contain them again....

-derek

  Derek Atkins, MIT '93, Electrical Engineering and Computer Science
     Secretary, MIT Student Information Processing Board (SIPB)
           MIT Media Laboratory, Speech Research Group
           [email protected]       PP-ASEL        N1NWH