'sign (and cert)' or just 'cert' on a master key with subkeus
gabri.philippe at gmail.com
Tue Aug 1 16:03:25 CEST 2017
On Tue, Aug 1, 2017 at 1:45 PM, MFPA
<2014-667rhzu3dc-lists-groups at riseup.net> wrote:
> Shouldn't "auto-key-locate" in their gpg.conf take care of this?
> Doesn't "auto-key-retrieve" in their gpg.conf take care of this?
Well, these are not defaults, hence unlikely to be defined by people
who never refresh their keys. And the second looks dangerous to me
with the growing use of TOFU.
More information about the Gnupg-users