[riffraff]

I just signed up on keybase.io.

It seems that I can authenticate, get a few people to track me, than revoke my key and upload a new one. I can also, obviously, recover my password via email.

And at the end of the process, people who were "tracking" me will still be tracking me. I am not sure this is supposed to happen.

[mey]

As long as you don't follow the delete account track, this seems correct. People who track you can choose to be notified by Keybase.io of the change in your key (which is the default option). Additionally, if you can re-prove your identity against the same external identities this makes sense as a way to recover from a compromised key.