[wellylug] GPG Question

[David Murray]

On Thu, 2 Mar 2006, Jonathan Harker wrote:

> Jethro Carr wrote:
>> So say you signed "jethro.carr at jedolinux.com", if I changed my email to
>> "jethro.carr at some_place_other_than_microsoft.com", your signature
>> against my key would be "lost", as the signature was against the old
>> email address/UID.
>>
>> does that make sense? :-/
>
> I understand exactly, I have same problem. I don't know either.  :-)

Perhaps this is to ensure that the signature is for the one person at the 
one email address, and for no other.


Thus, if you want a new email address, you will need a new signature, and 
people will need to again verify you are who you say you are.

That kinda makes sense to me, given that pgp signatures are intended to 
ensure person to person communication.

Aren't they?


Cheers

David Murray