link(1)

NAME
link - Manages authenticated certificate and User ID links

SYNOPSIS
link [-h|--help] <subcommands>

DESCRIPTION
Manages authenticated certificate and User ID links

Link a certificate and User ID is one way of making "sq" consider a binding to be authentic. Another way is to use "sq certify" to certify the binding with an explicitly configured trust root. The linking functionality is often easier to work with, and the information is private by default.

Authenticated bindings can be used to designate a certificate using a symbolic name. For instance, using "sq encrypt"'s "--recipient-userid" and "--recipient-email" options, a user can designate a certificate using a User ID or an email address that is authenticated for that certificate.

"sq" also uses authenticated certificates to authenticate other data. For instance, "sq verify" considers signatures made by an authenticated certificate to be authentic.

Users can create a link using "sq link add". That link can later be retracted using "sq link retract". A certificate can also be accepted as a trusted introducer by passing the "--ca" option to "sq link add".

"sq" implements linking using non-exportable certifications, and an implicit trust root. An OpenPGP certificate directory, the default certificate store used by "sq", includes a local trust root, which is stored under the "trust-root" special name. When the user instructs "sq" to accept a binding, "sq" uses the local trust root to create a non-exportable certification, which it stores in the certificate directory. In this way, operations that use the web of trust to authenticate a binding automatically use links.

When a user retracts a link, "sq" creates a new, non-exportable certification with zero trust. This certification suppresses the previous link.

OPTIONS

-h, --help
    Print help information (use `-h` for a summary)

SUBCOMMANDS

link-add(1)
    Link a certificate and a User ID

link-retract(1)
    Retracts links

link-list(1)
    Lists links

link-help(1)
    Print this message or the help of the given subcommand(s)

EXTRA
EXAMPLES: # Link 0123456789ABCDEF and User ID "<romeo@example.org>". $ sq link add 0123456789ABCDEF "<romeo@example.org>" # Link the certificate 0123456789ABCDEF with its current set of # self-signed User IDs as a trusted introducer for example.org. $ sq link add --ca example.org 0123456789ABCDEF # Link the certificate 0123456789ABCDEF with its current set of # self-signed User IDs as a trusted introducer. $ sq link add --ca '*' 0123456789ABCDEF # Retract the link between 0123456789ABCDEF and "<romeo@example.org>". $ sq link retract 0123456789ABCDEF "<romeo@example.org>" # Retract all links associated with 0123456789ABCDEF. $ sq link retract 0123456789ABCDEF