From: Theodore Tso Date: Mon, 03 May 2010 11:16:55 GMT Subject: Re: PATCH: Less fragile lookup of gpg key Message-ID: In-Reply-To: On May 2, 2010, at 8:59 PM, Greg A. Woods wrote: > I'm not an expert on PGP internals or such, but I think that's a really > bad thing to do. I'm surprised you were able to get gpg to do it in the > first place. I would have hoped it wouldn't allow it. As far as I can > tell it's _not_ compatible with other implementations of PGP. > You can of course have more than one e-mail address per key, but you > should NEVER have more than one key per e-mail. This is pretty common actually. At the very least it will happen if people are trying to transition between an older and a newer key --- for example, if they are trying to move from a less secure crypto algorithm to a more secure crypto algorithm. And most versions of PGP support it _just_ _fine_. They may not pick the key I want, but that's why I have environment or config files set up in various programs which use PGP to use a specific PGP KeyID. -- Ted