Just create a new S-only subkey. There's no need to remove the S capability
from the primary key because the signing key is only used by yourself and you
know that you want to use the subkey for signing.

Right.  In case someone wants to do this anyway there is a hidden
command "changeusage" in the --edit-key menu.  Take care, this creates
as usual a new self-signature.

Okay. So, if the places where my key is referred using fingerprint of the primarykey, it doesn't matter whether I add/del subkeys as their OpenPGP implementation can still search using the same fingerprint and choose the right key (new subkey-S) for signature-verification, correct?

Regards,
RG.

Attachment: OpenPGP_signature
Description: OpenPGP digital signature

_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users

Reply via email to