Given the alleged possibility that an adversary might attempt to acquire my (OFFLINE) Secret Certification Key and Passphrase and sign other keys with it, including a key they made with my User-Identity metadata to pretend to be me:

Does GPG have a command that asks keyservers to search for and list every key signed by a particular key (fingerprint)?

E.g., Is it possible to double check that I recognize every key signed by my key, 0x1234567890123456?

Maybe this isn't possible because it would make social graphing too easy, but all help appreciated!


No, there is no such command. But you could easily fetch a dump of all keys known to the key servers and query it yourself someway. Or look at the PGP Web of Trust statistics which includes such a list and grep it. The underlying wot file could make things easier.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.