Quote from: downfourthecount on July 27, 2012, 07:36 pmLC,Thanks so much for your suggestions! I believe I figured out how to adjust my preferences and have republished my public key. The email connected was actually never going to be used, just set it up at first when I was unsure of what was going on. Do you suggest I make a new one without email (or with TorMail) even if I plan on just using PGP through SR channels and not even ever logging in to that account?The key is definitely updated with better ciphers, so that's good.As for the user ID. It's always possible that someone will use the information in the UID to contact you directly or track you down. Now while it is a relatively simple matter to update that information (adduid), that won't necessarily delete the old UID from people who already have your key.If I were in your shoes I'd replace the key entirely and either not include an email address or use a Tor Mail one. You could create a key that does not include a Tor Mail email address (or other anonymous email address) and then add that information at a later date if you create one.I also wouldn't configure the key and subkeys the way you have. Your keys are:pub 2048R/B16183BA created: 2012-07-27 expires: never   usage: SCEAsub 2048R/1A5E16A9 created: 2012-07-27 expires: 2016-07-27 usage: SEA For the usage I would make the master key (the top one) either Signing/Certification (SC) or just Certification (C). With a Signing (S) subkey and an Encrypting (E) subkey. Unless you plan to use your GPG key for SSH access to another system then I wouldn't bother with an Authentication (A) subkey.Again, my key can be used for comparison:pub 4096R/DD7B4576 created: 2012-06-16 expires: never   usage: SC sub 2048R/195D71B8 created: 2012-06-16 expires: never   usage: S sub 4096g/D677EF45 created: 2012-06-16 expires: never   usage: E Instructions for how to create a key like mine are here:http://dkn255hz262ypmii.onion/index.php?topic=28474.0Instructions for properly backing up a key and just using the subkeys for day to day use are here:http://dkn255hz262ypmii.onion/index.php?topic=28859.0You definitely don't want to use the same subkey for encryption that you do for signing.