TOFU - motivation

Werner Koch wk at
Sat Apr 4 12:22:26 CEST 2015

On Tue, 31 Mar 2015 22:15, rjh at said:

> The Web of Trust handles this by allowing people to decide their own
> trusted introducers.  But for system-wide TOFU, *every* application with
> write access to the DB is a trusted introducer.

I think there is a misunderstanding.  There won't be a system-wide TOFU.
The database storing the TOFU data will be local to the gnupg home
directory in the very same way as the ownertrust (trustdb.gpg) is.



Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.

More information about the Gnupg-devel mailing list