Open andres-erbsen opened 8 years ago
your description doesn't sound there's a need to retry updates (i.e., re-upload the key), as the update request has reached the keyserver.
does it mean more like every time before a signature is made, make a fresh lookup for the verifiable public key, and uses only the corresponding private one for signature?
c.c. @maditya
If we want to avoid the need for manual recovery in case a profile update makes it to the keyserver but the reply does not make it back, the client should retry the update until it gets a definitive response, EVEN IF the client has not been running continuously since it first issued the update. Not doing this can cause the affected client to sign messages using the previous PGP key while its contacts see the results of an update whose reply got list (and thus they reject the signatures).