65 lines
2 KiB
Text
65 lines
2 KiB
Text
# The default key to sign with. If this option is not used, the default key is
|
|
# the first key found in the secret keyring
|
|
default-key 0x6B147327595D299854FED9D51CED67750173FC1C
|
|
|
|
|
|
#-----------------------------
|
|
# behavior
|
|
#-----------------------------
|
|
|
|
# Get rid of copyright notice on every run.
|
|
no-greeting
|
|
|
|
# When verifying a signature made from a subkey, ensure that the cross
|
|
# certification "back signature" on the subkey is present and valid.
|
|
# This protects against a subtle attack against subkeys that can sign.
|
|
require-cross-certification
|
|
|
|
# Everyone should be using UTF-8.
|
|
charset utf-8
|
|
display-charset utf-8
|
|
utf8-strings
|
|
|
|
# when outputting certificates, view user IDs distinctly from keys:
|
|
fixed-list-mode
|
|
|
|
# Create ASCII armored output instead of binary OpenPGP format
|
|
armor
|
|
|
|
# Disable inclusion of the version string in ASCII armored output
|
|
no-emit-version
|
|
|
|
# Display long key IDs
|
|
keyid-format 0xlong
|
|
|
|
# List all keys (or the specified ones) along with their fingerprints
|
|
with-fingerprint
|
|
|
|
# Display the calculated validity of user IDs during key listings
|
|
list-options show-uid-validity
|
|
verify-options show-uid-validity
|
|
|
|
# This is taken over by dirmngr, but needed here for send keys
|
|
keyserver hkps://keys.openpgp.org
|
|
#keyserver hkps://hkps.pool.sks-keyservers.net
|
|
#keyserver-options no-honor-keyserver-url
|
|
#keyserver-options include-revoked
|
|
|
|
#-----------------------------
|
|
# algorithm and ciphers
|
|
#-----------------------------
|
|
|
|
# list of personal digest preferences. When multiple digests are supported by
|
|
# all recipients, choose the strongest one
|
|
personal-cipher-preferences AES256 AES192 AES CAST5
|
|
|
|
# list of personal digest preferences. When multiple ciphers are supported by
|
|
# all recipients, choose the strongest one
|
|
personal-digest-preferences SHA512 SHA384 SHA256 SHA224
|
|
|
|
# message digest algorithm used when signing a key
|
|
cert-digest-algo SHA512
|
|
|
|
# This preference list is used for new keys and becomes the default for
|
|
# "setpref" in the edit menu
|
|
default-preference-list SHA512 SHA384 SHA256 SHA224 AES256 AES192 AES CAST5 ZLIB BZIP2 ZIP Uncompressed
|