[Announce] new gnupg snapshot

Florian Weimer fw@deneb.enyo.de
Sat Apr 7 22:39:04 2001


Frank Tobin <ftobin@uiuc.edu> writes:


> Florian Weimer, at 22:27 +0200 on 7 Apr 2001, wrote:
>
> > They have talked about why importing trust is bad, but importing trust !=
> > importing a secret key.
>
> Not with GnuPG. Importing a secret key implies importing trust.
>
> Umm...then maybe _this_ is our problem?
Maybe.
> Why are the two being considered together at all?
IIRC it's planned for GnuPG 1.1, but the change was considered too grave for 1.0.x.
> Trust is something that is maintained separately in GnuPG, no?
Yes and no. At the moment, ultimate trust is tied to secret keys tightly. Other trust parameters can be freely set by the user.