security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2025-02-22 19:58:29 +01:00
Code Activity

* gpg.sgml: Note web bug behavior of auto-key-retrieve. Note that big

Browse Source 
photos mean big keys.  Document --rfc2440.
This commit is contained in:
David Shaw 2003-09-30 21:39:47 +00:00
parent 6e3c6e6bcb
commit ffc2ff3261
2 changed files with 21 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
doc/ChangeLog
View File

@ -1,3 +1,8 @@
2003-09-30 David Shaw <dshaw@jabberwocky.com>
* gpg.sgml: Note web bug behavior of auto-key-retrieve. Note that
big photos mean big keys. Document --rfc2440.
2003-08-23 Werner Koch <wk@gnupg.org> 2003-08-23 Werner Koch <wk@gnupg.org>
* DETAILS: Removed paragraph on gdbm usage. Notes that pipemode * DETAILS: Removed paragraph on gdbm usage. Notes that pipemode

17
doc/gpg.sgml
View File

@ -353,7 +353,9 @@ Create an alternate user id.</para></listitem></varlistentry>
<term>addphoto</term> <term>addphoto</term>
<listitem><para> <listitem><para>
Create a photographic user id. This will prompt for a JPEG file that Create a photographic user id. This will prompt for a JPEG file that
will be embedded into the user ID.</para></listitem></varlistentry> will be embedded into the user ID. A very large JPEG will make for a
very large key.
</para></listitem></varlistentry>
<varlistentry> <varlistentry>
<term>deluid</term> <term>deluid</term>
<listitem><para> <listitem><para>
@ -1105,6 +1107,12 @@ keyserver over the proxy set with the environment variable
This option enables the automatic retrieving of keys from a keyserver This option enables the automatic retrieving of keys from a keyserver
when verifying signatures made by keys that are not on the local when verifying signatures made by keys that are not on the local
keyring. keyring.
</para><para>
Note that this option makes a "web bug" like behavior possible.
Keyserver operators can see which keys you request, so by sending you
a message signed by a brand new key (which you naturally will not have
on your local keyring), the operator can tell both your IP address and
the time when you verified the signature.
</para></listitem></varlistentry> </para></listitem></varlistentry>
</variablelist> </variablelist>
@ -1787,6 +1795,13 @@ behavior. Use this option to reset all previous options like
disabled. disabled.
</para></listitem></varlistentry> </para></listitem></varlistentry>
<varlistentry>
<term>--rfc2440</term>
<listitem><para>
Reset all packet, cipher and digest options to strict RFC-2440
behavior. Note that this is currently the same thing as --openpgp.
</para></listitem></varlistentry>
<varlistentry> <varlistentry>
<term>--rfc1991</term> <term>--rfc1991</term>
<listitem><para> <listitem><para>