forked from extern/nix-config
gpg: Simplify gpg.conf
Many of these settings are not necessary to change since they're the default anyway, and by using the defaults, important settings should be automatically applied over time.
This commit is contained in:
parent
9f6a741589
commit
83d0503272
@ -1,13 +1,5 @@
|
|||||||
# New Start: A modern Arch workflow built with an emphasis on functionality.
|
# New Start: A modern Arch workflow built with an emphasis on functionality.
|
||||||
# Copyright (C) 2017-2018 Donovan Glover
|
# Copyright (C) 2017-2023 Donovan Glover
|
||||||
|
|
||||||
# 1. Use a keypool (specifically sks) instead of a regular keyserver
|
|
||||||
# 2. Use hkps to ensure a secure connection (hkp is to GPG as what http is to the web)
|
|
||||||
keyserver hkps://pgp.mit.edu
|
|
||||||
|
|
||||||
# Ignore all other keyservers since they may be malicious, whether intentional or not.
|
|
||||||
# This prevents pulling keys from a specific keyserver and forces GPG to use the keypool
|
|
||||||
keyserver-options no-honor-keyserver-url
|
|
||||||
|
|
||||||
# Use SHA512 instead of SHA256
|
# Use SHA512 instead of SHA256
|
||||||
personal-digest-preferences SHA512
|
personal-digest-preferences SHA512
|
||||||
@ -28,19 +20,3 @@ keyid-format 0xlong
|
|||||||
|
|
||||||
# Always show full fingerprints of keys
|
# Always show full fingerprints of keys
|
||||||
with-fingerprint
|
with-fingerprint
|
||||||
|
|
||||||
# Never show the version number (should be default)
|
|
||||||
no-emit-version
|
|
||||||
|
|
||||||
# Never use comments (should be default)
|
|
||||||
no-comments
|
|
||||||
|
|
||||||
# Always use utf-8
|
|
||||||
display-charset utf-8
|
|
||||||
|
|
||||||
# Always view user IDs distinctly from keys (should be default)
|
|
||||||
fixed-list-mode
|
|
||||||
|
|
||||||
# Always show user ID validity (should be default)
|
|
||||||
verify-options show-uid-validity
|
|
||||||
list-options show-uid-validity
|
|
||||||
|
Loading…
Reference in New Issue
Block a user