I just uploaded my PGP Key because Cyrus mentioned that I didn't have one my web page. It's quite an old key that I created in 1997. The good thing is that it's signed by many people. The bad thing is that since it has been sitting around for a long time, It's more likely to have been stolen. So I'm trying to figure out whether I should dump the key and start using a new one. I have made a new one, but no one has signed it and I never end up using it. It's also kind of a pain for people when you have multiple keys...
Recent Comments
PhDs, blogging and procrastination
Apr 09, 12:04› Joi: Hi Michael. It is actually a relatively commons form of PhD and it does require a literature review, and a contribution to the field, a prop… Apr 07, 18:04› Joi: If it turns out well I'll post it. ;-) Apr 07, 18:04› Joi: I think we should do research and I think that we will some day probably discover how to halt or reverse a significant part of the aging pro…My email and task management protocol
Dec 29, 20:12› Chanan: Thank you for sharing this Joi, a lot of gems here for sure. Dec 22, 13:12› Azhar Rafiq: Excellent comparison. I use Trello to manage my manuscript tasks and team organizer but find Evernote to be a bit more versatile. I'll have … Dec 21, 18:12› David Jimenez: Try Active In Box extension for Chrome to convert emails to GTD tasks, add subtasks, comments, links to shared Google Drive files, etc...
Dec 29, 20:12› beautifulsavage: The Western world doesn't have a parallel to geisha because we don't value education. A geisha is cultured, refined. She is beautiful, and t…
Aug 27, 03:08› Ecx: It is interesting that it seems by the posts that males are generally sympathetic and appreciative of the geisha tradition while the most ne…
Sep 01, 02:09› Johann Georg Blomeyer: This discussion gave all aspects of the roles and traditional practice on Geishas, which in the west have no equivalent. So, for the western…
The cycle of resistance to change in Japan
Apr 05, 12:04› Michael Vallance: Japanese have a well-deserved sense of pride in themselves, their culture, and the homogenous nature of the country's ethnic makeup. I think… Oct 20, 12:10› JM: I thought this post was from 2017 based on the date shown in my search results (Jan. 5 2017). I really wanted to gauge the latest trends on… Feb 24, 22:02› Guy: I have come to this discussion late, following a track on emergent democracy. Hopefully it is not too late.The notion of finding the correct…Recent Posts
- On Tea with Teachers
- PhDs, blogging and procrastination
- Reducing Reduction Essay Competition
- Super-Presentation - It's a Wrap!
- Resisting Reduction: A Manifesto
- My email and task management protocol
- Dealing with email and my partial attention problem during meetings
- Book Talk at The Harvard Book Store about Whiplash with Co-Author Jeff Howe
- Conversation with Megan Smith
- Conversation with Jonathan Zittrain
Make dated announcement of key transition, including both old and new public keys.
Sign key transition announcement with both old and new private keys, seeding new key with trust from old key.
Any compromisers of old key must now advertise their key fork. Conflict resolution for competing new keys (real vs fake) can be done with your physical appearance at key signing event for new key, where other public "trusted" keys sign new key (and implicitly, the "real" key transition).
Some people can address old key, but they now accept risk, due to your dated public announcement of transition from old key to new key.
Other people can address new key. Their risk acceptance depends on their verification of transition from old key to new key.
Your prior correspondent is right on the mark. I am going through this as well, and have decided that a regular ritual of key cleanup is just as important as doing backups. (Of course, that probably means that neither will ever get done...but that's another story.)
Joi, those of us who care enough to use the tool will be happy to reestablish your "web of trust" for the new key.
Having just watched "Diamonds are Forever" for the first time in a long while, I have become somewhat more paranoid about impersonators though.
[Remove the capital letters for a valid mail address.]