aboutsummaryrefslogtreecommitdiffstats
path: root/lib/crypto/gpg/gpgbin/import-ownertrust.go
Commit message (Collapse)AuthorAgeFilesLines
* gpg: do not sign with untrusted keysMarcin Serwin2024-10-231-0/+16
During encryption gpg was ignoring trust model of the user in favor of always using the insecure "always". This change removes this override and adds a helpful message if a user tries to encrypt a message with an untrusted key. To revert to the previous behavior users can add "trust-model always" to their gpg.conf file (default ~/.gnupg/gpg.conf). Signed-off-by: Marcin Serwin <marcin@serwin.dev> Acked-by: Tim Culverhouse <tim@timculverhouse.com>