security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2024-12-23 10:29:58 +01:00
Code Activity

* gpg.sgml: Note web bug behavior of auto-key-retrieve. Note that big

Browse Source 
photos mean big keys.  Document --rfc2440.  Document verify-option
show-unusable-uids.
This commit is contained in:
David Shaw 2003-09-30 21:47:19 +00:00
parent cb772decc4
commit 156774e0f3
2 changed files with 27 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
doc/ChangeLog
View File

@ -1,5 +1,9 @@
2003-09-30 David Shaw <dshaw@jabberwocky.com> 2003-09-30 David Shaw <dshaw@jabberwocky.com>
* gpg.sgml: Note web bug behavior of auto-key-retrieve. Note that
big photos mean big keys. Document --rfc2440. Document
verify-option show-unusable-uids.
* gpg.sgml: Clarify --mangle-dos-filenames, document list-option * gpg.sgml: Clarify --mangle-dos-filenames, document list-option
show-unusable-uids, remove --no-comment (which is now show-unusable-uids, remove --no-comment (which is now
--no-sk-comments), add --no-comments (to remove --comment), remove --no-sk-comments), add --no-comments (to remove --comment), remove

24
doc/gpg.sgml
View File

@ -364,7 +364,9 @@ Create an alternate user id.</para></listitem></varlistentry>
<term>addphoto</term> <term>addphoto</term>
<listitem><para> <listitem><para>
Create a photographic user id. This will prompt for a JPEG file that Create a photographic user id. This will prompt for a JPEG file that
will be embedded into the user ID.</para></listitem></varlistentry> will be embedded into the user ID. A very large JPEG will make for a
very large key.
</para></listitem></varlistentry>
<varlistentry> <varlistentry>
<term>deluid</term> <term>deluid</term>
<listitem><para> <listitem><para>
@ -1142,6 +1144,12 @@ keyserver over the proxy set with the environment variable
This option enables the automatic retrieving of keys from a keyserver This option enables the automatic retrieving of keys from a keyserver
when verifying signatures made by keys that are not on the local when verifying signatures made by keys that are not on the local
keyring. keyring.
</para><para>
Note that this option makes a "web bug" like behavior possible.
Keyserver operators can see which keys you request, so by sending you
a message signed by a brand new key (which you naturally will not have
on your local keyring), the operator can tell both your IP address and
the time when you verified the signature.
</para></listitem></varlistentry> </para></listitem></varlistentry>
</variablelist> </variablelist>
@ -1343,6 +1351,13 @@ verification, rather than the more common 32 bit (8 digit) IDs.
Defaults to no. Defaults to no.
</para></listitem></varlistentry> </para></listitem></varlistentry>
<varlistentry>
<term>show-unusable-uids</term>
<listitem><para>
Show revoked and expired user IDs during signature verification.
Defaults to no.
</para></listitem></varlistentry>
</variablelist> </variablelist>
</para></listitem></varlistentry> </para></listitem></varlistentry>
@ -1963,6 +1978,13 @@ behavior. Use this option to reset all previous options like
disabled. disabled.
</para></listitem></varlistentry> </para></listitem></varlistentry>
<varlistentry>
<term>--rfc2440</term>
<listitem><para>
Reset all packet, cipher and digest options to strict RFC-2440
behavior. Note that this is currently the same thing as --openpgp.
</para></listitem></varlistentry>
<varlistentry> <varlistentry>
<term>--rfc1991</term> <term>--rfc1991</term>
<listitem><para> <listitem><para>