On the security of ~/.password-store/.gpg-id [was: Re: Second OpenPGP-card]

[Werner Koch]

On Fri,  1 Mar 2024 21:56, Daniel Kahn Gillmor said:

> For example, GnuPG could instead offer an interface with explicit
> options to allow the user to choose to match certificates by
> fingerprint, or by e-mail address, or by name, or by full User ID, but

Simply prefix the fingerprint with 0x and gpg will only consider
fingerprints.  RTFM.  You know that very well given that you are the
person who was so keen to be able to maintain a "curated" keyring.


-- 
The pioneers of a warless world are the youth that
refuse military service.             - A. Einstein
-------------- next part --------------
A non-text attachment was scrubbed...
Name: openpgp-digital-signature.asc
Type: application/pgp-signature
Size: 247 bytes
Desc: not available
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20240302/7acf7a83/attachment.sig>