Gpgtools GPG Keychain Access → 1.4

Occasionally astonished user show up in support asking why a key can not be removed from the key servers or directly asking us to delete their key from the key servers (which we cannot even if we wanted to).

Let's implement an info message.

Msg:
A keyserver is a service that publishes public keys and makes them searchable. You can upload yours so that other users can find it. There are distributed networks of keyservers that share keys, so you only need to upload your key once to that network.

Important: Understand, that all information from your key like Name and email will be publicly visible on the key servers. You can revoke but not deleted your key from the keyservers.

Do you want to upload your public key after it is created?

Cancel OK

Alternative from https://ssd.eff.org/en/module/how-use-pgp-mac-os-x Section 2. We should still evaluate how detailed the message should be.

Msg:
Uploading your key is normal practice, but it can reveal that you're using encryption, even if you don't use your own name. Also, others might upload your key and associate their own key with it, implying that you and they have a connection. That can be harmful if you are communicating and don't want people to know it. It can also be troublesome if you're not communicating, but your attacker wants people to think that you are associated.