'sign (and cert)' or just 'cert' on a master key with subkeus

[Gabriel Philippe]

On Tue, Aug 1, 2017 at 1:45 PM, MFPA
<2014-667rhzu3dc-lists-groups at riseup.net> wrote:
>>(...)
> Shouldn't "auto-key-locate" in their gpg.conf take care of this?

>> (...)
> Doesn't "auto-key-retrieve" in their gpg.conf take care of this?

Well, these are not defaults, hence unlikely to be defined by people
who never refresh their keys. And the second looks dangerous to me
with the growing use of TOFU.

-- 
Gabriel