I use two subkeys (one for encryption and one for signing) and I keep my master key off my computer. While looking at the enigmail KeyManager, I clicked on "generate revocation certificate" just to see what it would do. It then prompted me to choose a file to save the certificate in, and then reported that it had successfully generated it. That would be impossible because 1. It never prompted me for a password, and 2. The master key wasn't on the computer. It didn't even save a file where it said it had.
I guess this isn't really that much of an issue, but I figured I might as well post a bug report.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
I use two subkeys (one for encryption and one for signing) and I keep my master key off my computer. While looking at the enigmail KeyManager, I clicked on "generate revocation certificate" just to see what it would do. It then prompted me to choose a file to save the certificate in, and then reported that it had successfully generated it. That would be impossible because 1. It never prompted me for a password, and 2. The master key wasn't on the computer. It didn't even save a file where it said it had.
I guess this isn't really that much of an issue, but I figured I might as well post a bug report.
+1 on this. In my case, I tried to adduid whilst having removed the master key. gpg informed me of that; Enigmail was giving "addition successful"