Item — HN Reader

Expiring and revoking keys is a core part of how OpenPGP is meant to work.

Export just the valid self-sigs:

  --export-options parameters

    export-minimal

     Export  the smallest key possible. This removes all
     signatures except the most recent self-signature on
     each  user  ID.  This option is the same as running
     the --edit-key  command  "minimize"  before  export
     except  that the local copy of the key is not modi-
     fied. Defaults to no.

I know it is supposed to work like that, though in practice that's not how people seem to use it (ie. the issue of "you are holding it wrong").

Thanks for this parameter, did not know that before, and this should help a lot! :) I guess it should be something to be pointed out in the docs as well as relevant feature?