Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | gpg: do not sign with untrusted keys | Marcin Serwin | 2024-10-23 | 1 | -0/+16 |
During encryption gpg was ignoring trust model of the user in favor of always using the insecure "always". This change removes this override and adds a helpful message if a user tries to encrypt a message with an untrusted key. To revert to the previous behavior users can add "trust-model always" to their gpg.conf file (default ~/.gnupg/gpg.conf). Signed-off-by: Marcin Serwin <marcin@serwin.dev> Acked-by: Tim Culverhouse <tim@timculverhouse.com> |