auto-key-retrieve considered harmful

Daniel Molkentin danimo at
Sun Dec 7 16:25:43 CET 2003

On Sunday 07 December 2003 15:32, Jeffrey Stedfast wrote:
>you mean like this one?
>gpg: WARNING: This key is not certified with a trusted signature!
>gpg:          There is no indication that the signature belongs to the

KMail also makes it _very_ clear wether a signature is trustworthy. So this is 
really a matter of other broken MUAs, not of GnuPG. Better file a bugreport 
with those MUAs.


Daniel Molkentin -- danimo at, danimo at
Klarälvdalens Datakonsult AB, Platform-independent software solutions

More information about the Gnupg-devel mailing list