X-Git-Url: https://iankelling.org/git/?a=blobdiff_plain;f=subdir_files%2F.gnupg%2Fgpg.conf;h=3ddb9ff196f5ce82e0ec2e8f183f3adfe863a89d;hb=15f043c2c297176bd623d8a8602e2dc5d67eacd6;hp=4a977eb5ed57783fc323e061b2d4d7db5de6f475;hpb=6c41878284a2347515e54a61b5aa650f130b0a81;p=distro-setup diff --git a/subdir_files/.gnupg/gpg.conf b/subdir_files/.gnupg/gpg.conf index 4a977eb..3ddb9ff 100644 --- a/subdir_files/.gnupg/gpg.conf +++ b/subdir_files/.gnupg/gpg.conf @@ -6,7 +6,24 @@ keyserver-options auto-key-retrieve # start gpg agent on login use-agent + # standard short key ids are easy to collide # https://security.stackexchange.com/questions/84280/short-openpgp-key-ids-are-insecure-how-to-configure-gnupg-to-use-long-key-ids-i # https://evil32.com/ +# another option is 0xshort keyid-format 0xlong + +# iank@fsf.org +default-key B125F60B7B287FF6A2B7DF8F170AF0E2954295DF + +# note, i did this so that gpg-agent would not hold open the .gnupg dir. +# so I could unmount the filesystem which holds the .gnupg dir while +# running gpg-agent. +# also, symlinking things like keys in the .gnupg dir is a recipe +# for trouble +# https://askubuntu.com/questions/777900/how-to-configure-gnupgs-s-gpg-agent-socket-location + +# rm -f ~/.gnupg/S.gpg-agent +# echo -e "%Assuan%\nsocket=${HOME}/gpg-agent-socket/s" > ~/.gnupg/S.gpg-agent +# # this is also in my conflink scrpt: +# install -d -m700 ~/gpg-agent-socket