I almost feel stupid for asking this, but I have some trouble understanding subkeys, and what to do if a subkey gets compromised.
Let's say my "main" private key is used for certification only. I created separate subkeys for signing, encryption, and authentication.
The "main" private key is stored in a vault, and I have the subkeys on my laptop for daily usage.
Now, let's say my laptop gets stolen. I create a revoke request for those subkeys, and create new encryption, signing, and authentication subkeys.
Now, this where I get confused:
- What happens to my existing public key? Do I need to export my public key again, and have it signed by trusted partners again?
- Can messages signed by the new signing subkey, be validated by the public key I already distributed in the past?