Are TOFU statistics used for validity or conflict resolution?

Neal H. Walfield neal at
Fri Jun 23 13:25:31 CEST 2017

At Fri, 23 Jun 2017 13:22:23 +0200,
Peter Lebbing wrote:
> On 23/06/17 12:56, Neal H. Walfield wrote:
> > It's up to the GPG client to interpret it.  This document (authored by
> > Andre and me) has some recommendations for MUAs:
> Ah! Thanks for the information.
> I was thinking about how GnuPG handled it, i.e., on the gpg command line
> or as a backend for some frontend. I got the impression the "validity"
> field affected the text of the gpg command line but nothing else
> (g10/tofu.c:show_statistics() returns "show_warning" asserted for
> valdities below 3).

You're right: gpg also uses this information to display some

More information about the Gnupg-users mailing list