Can you please give me a scenario where it would be useful to go into the --edit-key and sign sign selected user ID instead of signing all UIDs from command line using --sign-key?
1 Answer
Well, the whole point of key signing (aka "certifying") is that you vouch for the binding between the key and the claimed identity.
So there can be situations where you can be certain about someone's personal email, but not their work email. Alternatively, you might want to certify their nickname or callsign, but not necessarily their legal name. Or the other way around.
(Besides: UIDs can be added at any time later, not just when creating the key. Sometimes you might want to sign just the new ones, or just old ones.)
answered Apr 9, 2018 at 5:57
