this post was submitted on 09 Jan 2026
4 points (100.0% liked)

Privacy

4613 readers
544 users here now

Welcome! This is a community for all those who are interested in protecting their privacy.

Rules

PS: Don't be a smartass and try to game the system, we'll know if you're breaking the rules when we see it!

  1. Be civil and no prejudice
  2. Don't promote big-tech software
  3. No apathy and defeatism for privacy (i.e. "They already have my data, why bother?")
  4. No reposting of news that was already posted
  5. No crypto, blockchain, NFTs
  6. No Xitter links (if absolutely necessary, use xcancel)

Related communities:

Some of these are only vaguely related, but great communities.

founded 1 year ago
MODERATORS
otter@lemmy.ca
shaytan@lemmy.dbzer0.com
4
A little help with GnuPG (lemmy.world)
submitted 2 weeks ago by MITM0@lemmy.world to c/privacy@lemmy.dbzer0.com
5 comments fedilink hide all child comments
 

I want to some guidance.

So let's say you created a PGP key & then proceeded to create 2 subkeys. Is it possible to just export the particular subkeys only. (let's say one for encryption & the other for signing) for OTHERS to import into their keyring for authentication & encryption ?

you are viewing a single comment's thread
view the rest of the comments
[–] ken@discuss.tchncs.de 2 points 3 hours ago* (last edited 3 hours ago) (1 children)

What purpose does (certifying with) the primary key serve there if you don't disclose it prior to rotation? What do you gain by not disclosing it when its only used in this context? It may be you haven't thought it through fully but otherwise sounds like you can get what you want by separate primary keys which you then manually --sign-key between on demand.

[–] MITM0@lemmy.world 1 points 1 hour ago (1 children)

The thing is with each new primary-keys you have build up trust, but subkeys are associated.

It's a covenience thing

[–] ken@discuss.tchncs.de 1 points 56 minutes ago* (last edited 54 minutes ago)

The trust comes from the association. You can't remove (or keep private) the association and expect to not have to separately rebuild the trust as a consequence. That what you are trying to do is made is inconvenient in GPG is quite intentional I believe. Or maybe I misunderstand your motivations, it's a bit ambiguous and you leave a lot open for interpretation.