Re: [openpgp] email death certificates

There is the "designated revoker" feature?
Not sure offhand if there are reason-codes.

-derek

On Fri, August 23, 2019 2:05 pm, Michael Richardson wrote:
>
> I had the unfortunate duty to remove an email address from a community
> email list because the person had passed away.  I wonder how many other
> lists this rather active person is on, and how many years it will be
> before the lists are cleaned up.
>
> When my dad passed away in the fall of 2003, it wasn't until the end of
> April
> the following year that the University cleaned up his email account.
> There
> was clearly a need to keep the account open for quite some time due to
> other university business that hadn't yet closed.
>
> I was thinking this morning about an SMTP responses, a 55x-type,
> but it rather needs to be signed.  Sigh, 2019, and still not enough
> useful email security to do this.  But still.
>
> Is there something in openpgp spec that I'm missing here?
> I don't think that revoking the key is the right thing.
> In particular, nobody may know how to find the private key to revoke it.
> What's wanted is a revocation of the PGP signature with a reason.
>
> Has anyone given any thought to this?
>
> I suppose it might also apply to "does not work here anymore"
>
> --
> Michael Richardson <mcr+IETF@sandelman.ca>, Sandelman Software Works
>  -= IPv6 IoT consulting =-
>
>
>
> _______________________________________________
> openpgp mailing list
> openpgp@ietf.org
> https://www.ietf.org/mailman/listinfo/openpgp
>

-- 
       Derek Atkins                 617-623-3745
       derek@ihtfp.com             www.ihtfp.com
       Computer and Internet Security Consultant