50

Over the years I've accumulated a few keys. When I generated them, and when I added various uids to them, I didn't use the 'comment' feature wisely.

At this point I would like to correct that and update just the comment field on each of the uids -- but without losing the signatures that they have accumulated. No eddress change, no name change, just the comments on the uids.

Can this be done without having to adduid/{del,rev}uid for each one and losing the signatures?

Jens Erat
  • 37,523
  • 16
  • 80
  • 96
RoUS
  • 1,888
  • 2
  • 14
  • 29
  • This was a while ago, but I'm curious, what did you consider unwise about your use of “comment”? – xenoterracide Aug 15 '21 at 12:14
  • When I created some of my keys, I wasn't as forward-looking as I should have been in describing the UIDs; I didn't have a plan for formatting them consistently. As time has passed, some of the comments on older keys no longer apply. *E.g.*, they were created in a specific environment [such as describing my association with my emplyer at the time], but now have a wider/different scope. – RoUS Aug 25 '21 at 16:20

1 Answers1

74

Incoming signatures always point to a UID. UIDs cannot be modified, only revoked. If you want to change one, it will have to get signed again. If you revoke a UID, you will lose all incoming signatures.

UIDs are simple strings usually adhering to the pattern Name (comment) <mail@example.org>, and the signature is created over the whole string including the comment.

Imagine you could change UIDs without losing signatures. You could just change your name to another, and pretend to be this guy and be certified for this name at the same time. Same applies to comment information which is also certified.

Devy
  • 9,655
  • 8
  • 61
  • 59
Jens Erat
  • 37,523
  • 16
  • 80
  • 96