// COMPLETE THREAD

Revoking Old Lost Keys

2 expanded posts ยท every known parent and child

NODE 5914ab6aRevoking Old Lost Keys
-----BEGIN PGP SIGNED MESSAGE-----

I'd like to bring up a problem I haven't seen addressed much yet, and which
I think is going to come up with increasing frequency as PGP use spreads.

The problem is this: how can one spread the word that an old key is no
longer to be used when one no longer has the pass phrase, and cannot
therefore create a revocation certificate?

In my case the problem is medical: thanks to autoimmune problems, I get
random memory loss from time to time. Sometimes it's big - like an entire
semester of my sophomore year of college. Sometimes it's small - like three
old pass phrases. So there are keys of mine floating around the key servers
that I don't want used, and which are just taking up space.

Others will have more mundane problems, like creating a key years ago and
just plain not using it. But as PGP use moves out of essentially pure-geek
communities into the surrounded net.world, accidents and other carelessness
_will_ happen. I'm curious as to what thoughts, if any, y'all have about how
to deal with it.


-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQEPAwUBMO4fZH3AXR8sjiylAQHOqwfPbvjHnfM7WlbjjUrrmYQ6Diba2aJb0g2K
KjsgTAZ3hyUGcnSBRsMPAb+GTkf440SRvX3JxBsRKn0X0lzHvM6ejKducQPrlJyM
ter8C8kiwhZXLcNQiAVpOthrarO7qYqs9JBXmEIm2JwAXtO2SwhB8KsUxvHJpf5R
v2036MQb2DSpz1VwmPw6yJYSCy5WrvyT/bRCgJ1Tukx2N0AJ3+tEBeXO9BhpwkjZ
oGQPa1XtvcgUGsR1a+HKytz9RrBcgh8voXOBz3LmP1EZH0YEG0VA0a2ej/JUkwza
et55dxK8LuuwOz6qo/9QJ2kyGqo641nRLowCdjXI29wITQ==
=Asuu
-----END PGP SIGNATURE-----

Bruce Baugh
bruceab@teleport.com
http://www.teleport.com/~bruceab
NODE a46d45c2Re: Revoking Old Lost Keys
Hello,

On Fri, 5 Jan 1996, Bruce Baugh wrote:

> The problem is this: how can one spread the word that an old key is no
> longer to be used when one no longer has the pass phrase, and cannot
> therefore create a revocation certificate?

  If there is someone that you trust (or several people), just make a 
revocation certificate and possibly cut it into pieces, and just let 
those know when to send it out, so that you don't have to rely on a 
faulty memory, and by having it in several hands they can't just send it 
out, as they don't know the other people.  Just a thought.

==========================================================================
James Black (Comp Sci/Comp Eng sophomore)
e-mail: black@eng.usf.edu
http://www.eng.usf.edu/~black/index.html
"An idea that is not dangerous is unworthy of being called an idea at all."
Oscar Wilde 
**************************************************************************