diff --git a/doc/ChangeLog b/doc/ChangeLog index 79f4249a2..fa113782f 100644 --- a/doc/ChangeLog +++ b/doc/ChangeLog @@ -1,3 +1,9 @@ +2002-11-30 David Shaw + + * gpg.sgml: Point out that if the user absolutely must, it's + better to use --pgpX than forcing an algorithm manually. Better + still not to use anything, of course. + 2002-11-25 David Shaw * gpg.sgml: Document --sig-policy-url, --cert-policy-url, diff --git a/doc/gpg.sgml b/doc/gpg.sgml index 6df69d1ff..e2110f96d 100644 --- a/doc/gpg.sgml +++ b/doc/gpg.sgml @@ -2509,6 +2509,15 @@ compression algorithm. By default, GnuPG will do the right thing and create messages that are usable by any OpenPGP program. Only override this safe default if you know what you are doing. + + +If you absolutely must override the safe default, you are far better +off using the --pgp2, --pgp6, or --pgp7 options. These options are +safe as they do not force any particular algorithms in violation of +OpenPGP, but rather reduce the available algorithms to a "PGP-safe" +list. + +