← Back to issue list

Missing account-key revocation support

View original Launchpad issue

Metadata

Project
snapcraft (launchpad)
Number
#1800825
Type
issue
State
open
Author
~adam-collard
Labels
account-key
Created
2018-10-31 11:45:53.349330+00:00
Updated
2019-03-08 06:43:39.658430+00:00
Closed

Current evaluation

No evaluation has been recorded for this issue yet.

Issue body

As we can see in https://forum.snapcraft.io/t/snapcraft-register-key-failing/7732, store developers can very easily lose their private keys, even before they could sign anything with them. For those cases, a destructive form of key revocation (when all signatures are invalidated) would probably work. A more selective form of key revocation (when signatures prior to the action are considered valid) requires more elaborate support for timeproofs. In the interim, `snapcraft` CLI could be more informative about how to backup and restore keys (from `~/.snaps/gnupg`) and key-name conflicts.

Evaluation history

No evaluation history available.