Key practice

Robert J. Hansen rjh at sixdemonbag.org
Sun Nov 15 02:13:33 CET 2009


Also --

Keep in mind that I am not criticizing that weblog entry.  I am only
saying, "don't believe the hype."  Much of what it says is accurate: it
is a good idea to migrate towards better digest algorithms.  Just don't
believe anyone who tells you that DSA-1024 is insecure: it isn't.

That said, you can migrate to a different digest algorithm quite easily.
 Add these two lines to your gpg.conf file:



enable-dsa2
personal-digest-preferences SHA256 RIPEMD160 SHA1



Ta-da!  Simple.  :)




More information about the Gnupg-users mailing list