SQ(1)

💅 SQ(1) — the manual page for sq-pki-link-retract, bestie

okay so before we even get into it: this is the man page for sq-pki-link-retract from the User Commands manual, aka SQ(1). sit down, grab a snack, we're doing link retraction and it's gonna be cute 🎀

---

✨ NAME ✨

sq-pki-link-retract — retract links 💔

---

🦋 SYNOPSIS 🦋

sq pki link retract [OPTIONS]

---

🌸 DESCRIPTION 🌸

so basically: retract links. that's the whole vibe.

This command retracts links that were previously created using sq pki link add or sq pki link authorize. If you wanna know more deets, go read that subcommand's documentation, it's giving ✨context✨.

not me pointing out that it's called retract and not remove?? because the certifications are not removed, okay?? Instead a new certification gets added, which says that the binding has not been authenticated. it's giving breakup text, not delete-and-block 💀

sq pki link retract respects the reference time set by the top-level --time argument. Which means you can retract a link as of a particular time instead of right now. time travel but make it PGP. 🧚

---

💖 OPTIONS 💖

🍓 Subcommand options

• --all — Use all self-signed user IDs. all of them. every last one.
• --cert=FINGERPRINT|KEYID — Use certificates with the specified fingerprint or key ID.
• --cert-special=SPECIAL — Use certificates identified by the special name.
  • possible values: public-directories, keys.openpgp.org, keys.mailvelope.com, proton.me, wkd, dane, autocrypt, web
• --email=EMAIL — Use a user ID with the specified email address.
  • The user ID consists of just the email address. and lowkey? that email address does not have to appear in a self-signed user ID. no cap.
• --recreate — Recreate signature even if the parameters did not change.
  • So like, if the link parameters did not change, and therefore creating a signature should not be necessary, we omit the operation. This flag can be given to force the signature to be re-created anyway. sometimes you just want the signature made again, and honestly? valid. 💅
• --signature-notation NAME VALUE — Add a notation to the signature.
  • A user-defined notation's name must be of the form name@a.domain.you.control.org. If the notation's name starts with a !, then the notation is marked as being critical. And heads up bestie: if a consumer of a signature doesn't understand a critical notation, then it will ignore the signature. 😭 The notation is marked as being human readable.
• --userid=USERID — Use the specified user ID.
  • The specified user ID does not need to be self signed.
  • > Because using a user ID that is not self-signed is often a mistake, you need to use this option to explicitly opt in. so like. opt in on purpose. knowingly. with your whole chest.
• --userid-by-email=EMAIL — Use the self-signed user ID with the specified email address.

🌈 Global options

See sq(1) for a description of the global options. she's got the whole rundown, go check her out 🫶

---

🔥 EXAMPLES 🔥

Link the certificate EB28F26E2739A4870ECC47726F0073F60FD0CBF0 with the email address alice@example.org.

sq pki link add \
       --cert=EB28F26E2739A4870ECC47726F0073F60FD0CBF0 \
       --add-email=alice@example.org

Retract the acceptance of certificate EB28F26E2739A4870ECC47726F0073F60FD0CBF0 and the email address alice@example.org.

sq pki link retract \
       --cert=EB28F26E2739A4870ECC47726F0073F60FD0CBF0 \
       --email=alice@example.org

Retract the acceptance of certificate EB28F26E2739A4870ECC47726F0073F60FD0CBF0 and any associated user IDs. This effectively invalidates all links. all of them. it's giving scorched earth 🌋

sq pki link retract \
       --cert=EB28F26E2739A4870ECC47726F0073F60FD0CBF0 --all

---

👑 SEE ALSO 👑

• sq(1)
• sq-pki(1)
• sq-pki-link(1)

For the full documentation see <https://book.sequoia-pgp.org/>.

---

⭐ VERSION ⭐

1.5.0

---

okay that's the whole page, you ate that 💖 this was brought to you by Sequoia PGP, version 1.5.0 — mwah, stan, bye bestie 🎀✨🦋