David Shaw wrote: > Bob Proulx wrote: > > If a key has been signed with a default-cert-level of 0 is it possible > > to go back and edit the key signature and increase the level on a key? > > I could not find a way to do this. The best I could find was to > > delete the key plus signature and sign it again using a different > > level. Of course that worked. > > That is the only way to do it. The cert level is part of the > signature, and thus changing it requires issuing a new signature.
Ah... That makes sense. But I did not realize that before. > > Is this cert level no longer considered useful? Should I not include > > a cert level with keys I sign now? Or should we always add that > > option when signing a key? What is the standard proceedure? > > It's a matter of personal taste, really. Some people like it, and > some don't. It doesn't make much difference in practice since (unless > you're issuing level 1 sigatures, which are ignored by default), all > signature levels (or 0) are treated the same. Okay. I was thinking that somehow in the trust model the different levels were used differently. Such as something like three signatures of trust level 2 or one signature of trust level 3 were needed to trust a key, or some such. My memory is vague. Thanks for the update. Bob
signature.asc
Description: Digital signature
_______________________________________________ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
