[Gpg4win-devel] vs S/MIME (Re: Putty and ECDSA support for gpg-agent in 2.0)

Bernhard Reiter bernhard at intevation.de
Wed Jul 10 17:27:35 CEST 2013


On Wednesday 10 July 2013 at 15:35:59, Werner Koch wrote:
> Since Gpg4win 2.1.0 the user is
> actually asked whether he wants to trust a new root certificate.  That
> will also be the default for the upstream GnuPG 2.0.21.

How does this question work?
Does it trust the root ca in the dirmngr as well?

Up to recently the "allow-mark-trusted" setting let to 
a lower security, because people will just press yes, when they are task 
orientented and want to send their email. So it is the wrong time to ask the 
question. When does it come?

-- 
www.intevation.de/~bernhard (CEO)    www.fsfe.org (Founding GA Member)
Intevation GmbH, Osnabrück, Germany; Amtsgericht Osnabrück, HRB 18998
Owned and run by Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 490 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.wald.intevation.org/pipermail/gpg4win-devel/attachments/20130710/5504166f/attachment.sig>


More information about the Gpg4win-devel mailing list