Re:GPG signature verification
by AdmiralAsshat on Tuesday April 05, 2016 @04:18PM
(#11433993)
Surprisingly hostile reply, given that I made clear that I don't blame the keyserver for this.
I did attempt to contact the app developers about their app's behavior--unfortunately, the only method they provided was a mailing list, so, upon having my first attempt at being discrete blow up in my face, I decided that being forced to send an e-mail to a public mailing list in order to draw attention the fact that I had inadvertently de-masked myself just seemed like rubbing salt into a wound.
To boot, it seems like something of a stretch to put a privacy-conscious user who misconfigured (or was unaware what the default behavior was, in my case) his privacy app to be in the same boat as a G-man or a celebrity who took nude selfies, don'tcha think?
You're publishing completely public information on the internet. Even in a world where key servers will delete your key that doesn't really help you when anyone has access.
The best you can do is mark your keys as invalid by submitting a revocation certificate.
> If you still have the private key, you can use your PGP software to generate a revocation certificate, and upload that to the keyserver. The exact procedure for generating a revocation certificate varies depending on what PGP software you are using, please consult the documentation for more information. This will not delete your key from the key server, but it will tell people who download it that the key has been revoked, and should not be used.
If you're annoyed that unpublishing something on the internet is futile there are a lot of government officials and celebrities who will sympathize with you.