'sign (and cert)' or just 'cert' on a master key with subkeus

Gabriel Philippe gabri.philippe at gmail.com
Tue Aug 1 16:03:25 CEST 2017


On Tue, Aug 1, 2017 at 1:45 PM, MFPA
<2014-667rhzu3dc-lists-groups at riseup.net> wrote:
>>(...)
> Shouldn't "auto-key-locate" in their gpg.conf take care of this?

>> (...)
> Doesn't "auto-key-retrieve" in their gpg.conf take care of this?

Well, these are not defaults, hence unlikely to be defined by people
who never refresh their keys. And the second looks dangerous to me
with the growing use of TOFU.

-- 
Gabriel



More information about the Gnupg-users mailing list