>If B wants to forward it to C, they can strip off their own (B's) encryption, leaving A's (optional) private key signature, and send that to C. That could wor

>If B wants to forward it to C, they can strip off their own (B's) encryption, leaving A's (optional) private key signature, and send that to C. That could work. The PGP format is pretty modular. You could just strip out the content packet and signature packet. People don't do it because it would be confusing. Things like encrypted email list servers would be more likely to retain signatures. Believe it or not, the possibility is actually something people have complained about in the past: * https://articles.59.ca/doku.php?id=pgpfan:forwarding https://articles.59.ca/doku.php?id=pgpfan:forwarding