1

I have been struggling whole day trying to understand key validity.

  1. I had a public key in my pubring with validity unknown and trust unknown
  2. I signed it with an ultimately trusted key and the validity became full trust was still unknown
  3. then I deleted my signature using minimize command from --edit-key submenu
  4. after that I run --list-keys --list-options show-uid-validity
  5. but the validity of that key was still full even though it was no longer signed.

Please help me to understand this mystery.

Also, please confirm if using the using command --list-keys --with-colons nida gives me the same information as --list-options show-uid-validity except for here instead of the word "full" I just get one letter "f", and instead of "ultimate", I just get "u"

Thank you in advance for helping me understand this very difficult subject.

3

I signed it with an ultimately trusted key and the validity became full trust was still unknown

Trust is set manually, and is somewhat independent from validity computed from signatures.

  • Validity describes whether this key has enough signatures to prove that it's the right key.

  • Trust describes whether this key can make signatures on other keys. E.g. if you fully trust person A, and they sign person B's key, then you automatically see B's key as valid.

Commands like gpg --update-trustdb or gpg --edit-key $KEYID trust will let you change it. (Practical example: Arch Linux master keys.)

then I deleted my signature using minimize command from --edit-key submenu

Did you use the save command afterwards? If not, then all your changes were lost.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.