If subkeys are useful, does GnuPG have sub-sub-keys as well?
The current implementation of GnuPG feels a bit rigid, in that it only allows a two-level key management and subkeys are closely affiliated to their master key, have their own special names (
ssb instead of
sec), and enjoy not being listed by
--list-keys by default.
Given that subkeys are also full-fledged keys, why doesn't GnuPG simply treat subkeys as normal keys and let users themselves decide how they wish to use their keys? They can use the following schemes:
- a single key,
- a master key + a subkey,
- a master key + multiple subkeys,
- a master key + multiple subkeys + multiple subsubkeys,
Quite some flexibility.
The other question asks about how to manage sons. This one asks about whether it should have grandsons.