GPA `improvements'

Ingo Klöcker kloecker@kde.org
Sat Nov 9 17:36:02 2002


--Boundary-02=_CdTz9xSw79WHiYn
Content-Type: text/plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Description: signed data
Content-Disposition: inline

On Saturday 09 November 2002 15:43, Miguel Coca wrote:
> On Sat, Nov 09, 2002 at 14:33:19 +0100, Ingo Kl=F6cker wrote:
> > On Saturday 09 November 2002 14:23, Miguel Coca wrote:
> > > So, for example, for key validity we don't make a distinction
> > > between "ultimate" and "full" trust, and there is no "marginal"
> > > level. Keys are either valid, unknown, or revoked/expired (i.e.
> > > not valid, but we tell the user why).
> >
> > I'm wondering what you display for invalid keys (i.e. keys which
> > are missing a self-signature).
>
> It's not valid, and it's not revoked nor expired, so it falls into
> the "Unknown" category.
>
> I could add a special case, along with revoked and expired, and say
> why it is not valid. But I think that "invalid" is not a good name
> for it. I mean, if we are talking about key "validity", all keys that
> are not valid, by definition, are invalid.

True.

> So it doesn't make sense to use "invalid" to mean just some of the
> non-valid keys. If someone can suggest a reasonable term for keys
> without a self-signature, that doesn't sound too confusing for new
> users, I'll add it to the list.

What about "incomplete"?

> But anyway, is it even possible to import an invalid key with gpgme?
> Certainly it isn't with a simple "gpg --import".

Apparently it's not even possible with "gpg --expert --import". But of=20
course one can simply delete the self-signature from an already=20
imported key.

"Disabled" is another key status which seems to be missing. I don't know=20
in which scenario one might want to disable a key (except for testing)=20
so it's not really that important. OTOH as long as the status is known=20
one shouldn't display the status as "Unknown". This could give the=20
false impression that GPA is incomplete.

Regards,
Ingo


--Boundary-02=_CdTz9xSw79WHiYn
Content-Type: application/pgp-signature
Content-Description: signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQA9zTdCGnR+RTDgudgRAlsHAJ4uWaDgY6UJTxoMqmFDSeBBMA8xqgCeLobm
aY1ty9GavgFDcKX798t+/aE=
=3ZZN
-----END PGP SIGNATURE-----

--Boundary-02=_CdTz9xSw79WHiYn--