* gpg.sgml: Note web bug behavior of auto-key-retrieve. Note that big

photos mean big keys.  Document --rfc2440.

doc/ChangeLog

@@ -1,3 +1,8 @@
+2003-09-30  David Shaw  <dshaw@jabberwocky.com>
+
+	* gpg.sgml: Note web bug behavior of auto-key-retrieve.  Note that
+	big photos mean big keys.  Document --rfc2440.
+
 2003-08-23  Werner Koch  <wk@gnupg.org>
 
 	* DETAILS: Removed paragraph on gdbm usage.  Notes that pipemode

doc/gpg.sgml

@@ -353,7 +353,9 @@ Create an alternate user id.</para></listitem></varlistentry>
     <term>addphoto</term>
     <listitem><para>
 Create a photographic user id.  This will prompt for a JPEG file that
-will be embedded into the user ID.</para></listitem></varlistentry>
+will be embedded into the user ID.  A very large JPEG will make for a
+very large key.
+</para></listitem></varlistentry>
     <varlistentry>
     <term>deluid</term>
     <listitem><para>
@@ -1105,6 +1107,12 @@ keyserver over the proxy set with the environment variable
 This option enables the automatic retrieving of keys from a keyserver
 when verifying signatures made by keys that are not on the local
 keyring.
+</para><para>
+Note that this option makes a "web bug" like behavior possible.
+Keyserver operators can see which keys you request, so by sending you
+a message signed by a brand new key (which you naturally will not have
+on your local keyring), the operator can tell both your IP address and
+the time when you verified the signature.
 </para></listitem></varlistentry>
 
 </variablelist>
@@ -1787,6 +1795,13 @@ behavior.  Use this option to reset all previous options like
 disabled.
 </para></listitem></varlistentry>
 
+<varlistentry>
+<term>--rfc2440</term>
+<listitem><para>
+Reset all packet, cipher and digest options to strict RFC-2440
+behavior.  Note that this is currently the same thing as --openpgp.
+</para></listitem></varlistentry>
+
 <varlistentry>
 <term>--rfc1991</term>
 <listitem><para>