Enable KDF-DO on a populated GNUK

[Simon Josefsson]

NIIBE Yutaka <gniibe at fsij.org> writes:

> Rather, for me, it makes sense to go opposite direction, instead; ... to
> refuse keytocard/key-generation when KDF-DO is not available.

Yes please!  I have forgotten this sometimes, and it is annoying.
Having it fail early seems more reliable.

/Simon
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <https://lists.gnupg.org/pipermail/gnuk-users/attachments/20210128/126527bc/attachment.sig>