6

GnuPG allows the user to sign a key with a non-revocable signature. I have done this when I’m signing one of my own keys—signing my personal key with my work key, for instance. Is there any other situation in which this kind of signature either should or should not be used? Are there any commonly-accepted semantics in a non-revocable signature?

6

RFC4880, 5.2.3.12. Revocable considers non-revocable keys a "commitment" to a signature that cannot be revoked. The certification's validity can only be invalidated by revoking the entire key used for signing.

I cannot think of a bunch of use cases apart from yours of non-revocable signatures to other keys you're owning yourself.

I could imagine use of this flag for special signatures, like in a situation where an employee designates a revocation key (like an OpenPGP key acting as corporate CA), which cannot be removed any more (so the corporate CA is definitely able to revoke the key, even if breaking up with the employee in conflict.

  • That is not what RFC4880 says, it says: "They represent a commitment by the signer that he cannot revoke his signature for the life of his key." So it can be revoked, but only by revoking the whole key of the signer. – Chris Jacobs May 25 at 10:10
  • I agree this is a relevant addition; but to me it feels more like revoking the key is invalidating the non-revocable certification, but not actually revoking it? – Jens Erat May 25 at 12:35

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.