Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Changing name/comment on GPG key/uids without losing signatures?

Tags:

gnupg

pgp

Over the years I've accumulated a few keys. When I generated them, and when I added various uids to them, I didn't use the 'comment' feature wisely.

At this point I would like to correct that and update just the comment field on each of the uids -- but without losing the signatures that they have accumulated. No eddress change, no name change, just the comments on the uids.

Can this be done without having to adduid/{del,rev}uid for each one and losing the signatures?

like image 664
RoUS Avatar asked Jun 12 '14 14:06

RoUS


People also ask

Can you change a name on a GPG key?

UIDs cannot be modified, only revoked. If you want to change one, it will have to get signed again.


1 Answers

Incoming signatures always point to a UID. UIDs cannot be modified, only revoked. If you want to change one, it will have to get signed again. If you revoke a UID, you will lose all incoming signatures.

UIDs are simple strings usually adhering to the pattern Name (comment) <[email protected]>, and the signature is created over the whole string including the comment.

Imagine you could change UIDs without losing signatures. You could just change your name to another, and pretend to be this guy and be certified for this name at the same time. Same applies to comment information which is also certified.

like image 160
Jens Erat Avatar answered Nov 22 '22 14:11

Jens Erat