SQ(1)

🌸 SQ(1) — the cutest corner of the Sequoia PGP universe

okay bestie, you found sq(1) and specifically the sq-key-userid part of it, so let's get into it 💖

---

✨ NAME ✨

sq-key-userid — manage User IDs 🪪

---

🎀 SYNOPSIS 🎀

sq key userid add [OPTIONS]
sq key userid revoke [OPTIONS]

---

💅 DESCRIPTION 💅

Manage User IDs. That's the whole vibe.

Add User IDs to a key, or revoke them. Two little subcommands, both iconic in their own way.

---

🦋 SUBCOMMANDS 🦋

sq key userid add ✨

Add a user ID. So simple, so powerful.

A user ID can contain a name, like Juliet, or an email address, like <juliet@example.org>. Historically, ngl, a name and an email address were usually combined as a single user ID, like Juliet <juliet@example.org>. But here's the thing: user IDs that include different information such as name and email address are more difficult to reason about, so using distinct user IDs for name and email address is preferred nowadays. That's the glow-up, periodt. 👑

sq key userid add respects the reference time set by the top-level --time argument. It sets the creation time of the user ID's binding signature to the specified time. 🕰️

sq key userid revoke 🌧️

Revoke a user ID. Not the fun part, but sometimes you gotta.

Creates a revocation certificate for a user ID.

If --revoker or --revoker-file is provided, then that key is used to create the revocation certificate. If that key is different from the certificate that is being revoked, this results in a third-party revocation. This is normally only useful if the owner of the certificate designated the key to be a designated revoker. iykyk 🤝

Okay so here's the important part, bestie: to revoke a user ID, the certificate must be valid under the current policy. If the certificate is not valid under the current policy, consider revoking the whole certificate, or fixing it using sq cert lint after verifying the certificate's integrity. If the certificate is valid under the current policy, but the user ID you want to revoke isn't, you can still revoke the user ID using --add-userid. Note the details, they matter fr fr.

sq key userid revoke respects the reference time set by the top-level --time argument. When set, it uses the specified time instead of the current time when determining what keys are valid, and it sets the revocation certificate's creation time to the reference time instead of the current time. ⏰

---

💖 EXAMPLES 💖

sq key userid add 💫

Add a new user ID to Alice's key.

sq key userid add --cert \
       EB28F26E2739A4870ECC47726F0073F60FD0CBF0 --name Alice \
       --email alice@work.example.com

sq key userid revoke 🫶

Retire a user ID on Alice's key.

sq key userid revoke --cert \
       EB28F26E2739A4870ECC47726F0073F60FD0CBF0 --userid \
       "Alice <alice@example.org>" --reason retired --message \
       "No longer at example.org."

---

🌈 SEE ALSO 🌈

• sq(1)
• sq-key(1)
• sq-key-userid-add(1)
• sq-key-userid-revoke(1)

For the full documentation see <https://book.sequoia-pgp.org/>. 📚

---

⭐ VERSION ⭐

1.5.0

---

okay that's the whole page, you ate that 🍓 go forth and manage those User IDs like the main character you are. this was sq(1) from Sequoia PGP, version 1.5.0, so shoutout to them for the docs 💜 bye bestie!! 🦋✨