sq-key-approvals - Manages certification approvals

NAME  SYNOPSIS  DESCRIPTION  SUBCOMMANDS  sq key approvals list  sq key approvals update  EXAMPLES  sq key approvals list  sq key approvals update  SEE ALSO  VERSION 

---

NAME

sq−key−approvals − Manages certification approvals

SYNOPSIS

sq key approvals list [OPTIONS]
sq key approvals update [OPTIONS]

DESCRIPTION

Manages certification approvals.

Key holders may approve of third−party certifications associated with their certificate. This subcommand manages the approvals.

To prevent certificate flooding attacks, modern key servers prevent uncontrolled distribution of third−party certifications on certificates. To allow the key holder to control what information is distributed with their certificate, these key servers only distribute third−party certifications that the key holder has explicitly approved.

SUBCOMMANDS

sq key approvals list

Lists third−party certifications and their approval status.

To prevent certificate flooding attacks, modern key servers prevent uncontrolled distribution of third−party certifications on certificates. To allow the key holder to control what information is distributed with their certificate, these key servers only distribute third−party certifications that the key holder has explicitly approved.

sq key approvals update

Approves of third−party certifications allowing for their distribution.

To prevent certificate flooding attacks, modern key servers prevent uncontrolled distribution of third−party certifications on certificates. To allow the key holder to control what information is distributed with their certificate, these key servers only distribute third−party certifications that the key holder has explicitly approved.

By default, all user IDs are considered, but if at least one ‘−−name‘, ‘−−email‘, or ‘−−userid‘ argument is given, only the matching user IDs are considered.

After the approvals have been changed, the certificate has to be distributed, e.g. by uploading it to a key server.

EXAMPLES

sq key approvals list

Lists the approved certifications on all the user IDs.

sq key approvals list \

−−cert=EB28F26E2739A4870ECC47726F0073F60FD0CBF0

Lists the unapproved certifications on all the user IDs.

sq key approvals list −−pending \

−−cert=EB28F26E2739A4870ECC47726F0073F60FD0CBF0

Lists all unapproved certifications on a given user ID.

sq key approvals list −−pending −−[email protected] \

−−cert=EB28F26E2739A4870ECC47726F0073F60FD0CBF0

sq key approvals update

Approve of all of the certifications on all of Alice’s user IDs.

sq key approvals update −−add−all \

−−cert=EB28F26E2739A4870ECC47726F0073F60FD0CBF0

Approve of all of the certifications on all of Alice’s user IDs made by Bob, discarding all prior approvals first.

sq key approvals update −−remove−all \

−−add−by=511257EBBF077B7AEDAE5D093F68CB84CE537C9A \
−−cert=EB28F26E2739A4870ECC47726F0073F60FD0CBF0

Approve of all of the certifications on a specific user ID by certifiers that can be authenticated, discarding all prior approvals first.

sq key approvals update −−remove−all −−add−authenticated \

−−cert=EB28F26E2739A4870ECC47726F0073F60FD0CBF0 \
−−userid="Alice <[email protected]>"

Remove the approval of Bob’s certification on all of Alice’s user IDs.

sq key approvals update \

−−remove−by=511257EBBF077B7AEDAE5D093F68CB84CE537C9A \
−−cert=EB28F26E2739A4870ECC47726F0073F60FD0CBF0

SEE ALSO

sq(1), sq−key(1), sq−key−approvals−list(1), sq−key−approvals−update(1).

For the full documentation see <https://book.sequoia−pgp.org/>.

VERSION

1.3.1

---