3 ms·
When I say key, I'm obviously talking about the private key. It honestly seems like the only reason you'd want to rotate subkeys or have distinct ones for diff
by sascha_sl 5y ago
When I say key, I'm obviously talking about the private key.
It honestly seems like the only reason you'd want to rotate subkeys or have distinct ones for different devices. Otherwise you're going to be stuck with at least one perpetual key anyway. It makes GPG somewhat more usable after you're done issing subkeys on your super secure airgapped workstation, because now losing a key/machine isn't a death sentence to your perpetual forever-lived identity.
But then again, it's not like you can't reply to a PGP encrypted message with "sorry i lost my keys new fingerprint is x, please use that one" and most people will just do that.
- upofadown 5y agoThe way I look at is is that the chance of a PGP key compromise over someone's lifetime is so close to zero as to not matter. Rebuilding your reputation is at the most just inconvenient. Redemption certificates actually work with PGP so you wouldn't have to worry about old identities hanging around.