Many more sigs show when I add --with-colons to --list-sigs

[Robert J. Hansen]

> I'm trying to understand some odd behavior I'm seeing in gpg. I've had
> my key since 1999 and I've got dozens of signatures on it. But when I
> run

A partial answer:

-----
sig:?::1:9710B89BCA57AD7C:1104308002:1105517602:::[User ID not
found]:10x:::::2:
sig:?::1:9710B89BCA57AD7C:1105474213:1106683813:::[User ID not
found]:10x:::::2:
sig:?::1:9710B89BCA57AD7C:1106640560:1107850160:::[User ID not
found]:10x:::::2:
sig:?::1:9710B89BCA57AD7C:1107807915:1109017515:::[User ID not
found]:10x:::::2:
sig:?::1:9710B89BCA57AD7C:1108780465:1109990065:::[User ID not
found]:10x:::::2:
sig:?::1:9710B89BCA57AD7C:1110013668:1111223268:::[User ID not
found]:10x:::::2:
sig:?::1:9710B89BCA57AD7C:1111310073:1112519673:::[User ID not
found]:10x:::::2:
sig:?::1:9710B89BCA57AD7C:1112519896:1113729496:::[User ID not
found]:10x:::::2:
sig:?::1:9710B89BCA57AD7C:1113726620:1114936220:::[User ID not
found]:10x:::::2:
sig:?::1:9710B89BCA57AD7C:1113769839:1114979439:::[User ID not
found]:10x:::::2:
sig:?::1:9710B89BCA57AD7C:1114978523:1116188123:::[User ID not
found]:10x:::::2:
sig:?::1:9710B89BCA57AD7C:1116146221:1117355821:::[User ID not
found]:10x:::::2:
sig:?::1:9710B89BCA57AD7C:1116146221:1117355821:::[User ID not
found]:10x:::::2:
sig:?::1:9710B89BCA57AD7C:1116319455:1117529055:::[User ID not
found]:10x:::::2:
sig:?::1:9710B89BCA57AD7C:1117485606:1118695206:::[User ID not
found]:10x:::::2:
sig:?::1:9710B89BCA57AD7C:1117571920:1118781520:::[User ID not
found]:10x:::::2:
-----

See all those signatures coming from the same certificate? GnuPG treats
only the most recent signature from a certificate as being the
definitive one. For instance, a revoked certificate will have a self
signature and a revocation signature: the revsig is newer, so it governs.

The human-friendly interface suppresses a lot of data that isn't
relevant (such as, e.g., signatures that aren't being considered). The
--with-colons interface is meant for machines to process and reveals a
lot more data.

This doesn't account for everything you're seeing (I don't think), but
it does account for a lot.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20260727/11837e34/attachment.sig>