Someone signed my PGP key, by accident (we have never met, but I know the person a little).

The wrong signature was uploaded to the SKS pool. Is there anything we can do about it to improve the web of trust again?

1 Answer 1


They can revoke the signature using the revsig command of gpg --edit-key then re-upload the key to the keyservers. Alternatively you could meet up with them demonstrate your bona fides and make the signature retroactively true.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .