Make dated announcement of key transition, including both old and new public keys.

Sign key transition announcement with both old and new private keys, seeding new key with trust from old key.

Any compromisers of old key must now advertise their key fork. Conflict resolution for competing new keys (real vs fake) can be done with your physical appearance at key signing event for new key, where other public "trusted" keys sign new key (and implicitly, the "real" key transition).

Some people can address old key, but they now accept risk, due to your dated public announcement of transition from old key to new key.

Other people can address new key. Their risk acceptance depends on their verification of transition from old key to new key.

Your prior correspondent is right on the mark. I am going through this as well, and have decided that a regular ritual of key cleanup is just as important as doing backups. (Of course, that probably means that neither will ever get done...but that's another story.)

Joi, those of us who care enough to use the tool will be happy to reestablish your "web of trust" for the new key.

Having just watched "Diamonds are Forever" for the first time in a long while, I have become somewhat more paranoid about impersonators though.

[Remove the capital letters for a valid mail address.]