Given the alleged possibility that an adversary might attempt to acquire my (OFFLINE) Secret Certification Key and Passphrase and sign other keys with it, including a key they made with my User-Identity metadata to pretend to be me:

Does GPG have a command that asks keyservers to search for and list every key signed by a particular key (fingerprint)?

E.g., Is it possible to double check that I recognize every key signed by my key, 0x1234567890123456?

Maybe this isn't possible because it would make social graphing too easy, but all help appreciated!

1 Answer 1


No, there is no such command. But you could easily fetch a dump of all keys known to the key servers and query it yourself someway. Or look at the PGP Web of Trust statistics which includes such a list and grep it. The underlying wot file could make things easier.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .