Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.
Sign up to join this community
I'm a little bit confused here, since the best practice suggests that main key should be completely offline, so which key should I upload to the public directory?
Here's what I have:
The best practices are to keep your primary private key offline. Your public key is required to be available, as all subkeys, user IDs (and thus certifications) are bound to it.
As you do not upload private keys to key servers anyway, you do not have to care about offline keys at all. You have to upload the primary public key, but could choose from the subkeys (depending on which you want to be available).
