I just created my first OpenPGP key with GnuPG + Thunderbird + Enigmail. The key is used for two email addresses. Now I created a revocation certificate. There is only on of the email addresses included in the filename of the revocation certificate.

Do I need a separate revocation certificate for each email address?


Can I use the created revocation certificate to revoke the key for all email address associated with the key?


A dedicated revocation certificate generated with --gen-revoke is created for the primary key and does not include any information on a given user ID, but when distributed will also indirectly revoke all user IDs and subkeys (as they're only valid together with the primary key).

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.