Mailing List Archive

Presentation. Migration to subkeys
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hello all, I'm new at this list.

I'm using OpenPGP with GPG since some years ago, I'm using as "usual
way": a pair of keys copying from one device to other.

I'm interested in subkeys and offline master key, I'd like to migrate
mine pairs but in "minimal effort": I'd like to no reupload any public
key to any server, I have all mine master keys for Certify and Sign,
but I'm afraid it not would be possible, I'd like to have master keys
only with Certify usage, but when I add a subkey for Sign, GPG signs
with new subkey and receipts can't verify because don't have new public
subkey.


Is it possible "extract" Sign usage from master key an put it into a
subkey with the same ID and fingerprint? I'm think no.

This email is to verify that, indeed, it is not possible.

Regards and thanks in advanced, I hope I've explained right.
-----BEGIN PGP SIGNATURE-----
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=Q1GM
-----END PGP SIGNATURE-----

_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Presentation. Migration to subkeys [ In reply to ]
Diez via Gnupg-users wrote:
> Is it possible "extract" Sign usage from master key an put it into a
> subkey with the same ID and fingerprint? I'm think no.
>
> This email is to verify that, indeed, it is not possible.
>

If I understand correctly, "same ID and fingerprint" would mean that it
is *exactly* the same key, so while it might be possible to arrange a
PGP certificate like this, you would gain nothing: the subkey would be
an exact copy of the master key.


-- Jacob

_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users