In considering whether or not I want to join the big web o' trust and put my keys on a key server, I got to thinking about how it would affect my e-mail address' exposure. I generally try to keep my e-mail addresses from being too public, so as to avoid unwanted spam.
Along this train of thought, I began to wonder: If (feel free to correct me if I'm wrong) a PGP key is really meant to be a representation of my personal identity, does it really need to be associated with every e-mail address I'm going to use? Does it even need to be associated with an e-mail address at all? If not, what are the pros and cons of either implementation?
By my understanding, if someone receives a message that has my digital signature on it they should (in theory) be able to verify that the message came from me regardless of the sending address. Similarly, if someone wants to send an encrypted e-mail to me, they can (in theory) do so with my public key and be assured that no matter where that e-mail goes, only I will be able to read it.
So, what's the real deal here?