On Jul 11, 2012, at 1:06 PM, Sam Smith wrote:

> To make sure I understand correctly:
> 
> 1) cert-digest-algo SHA256 = will use SHA256 to sign KEYS with regardless of 
> what preferences the key holder has stipulated
> 
> 2) digest-algo SHA256 = will use SHA256 to sign MESSAGES with regardless of 
> what preferences the recipient of the message has stipulated
> 
> Do I understand these commands correctly?

Not exactly.  For signing keys (#1), there are no preferences, so there is 
nothing to override.  It's just whatever you set cert-digest-algo to.  Note, 
though, that this includes signing your own key, so if you make a subkey or add 
a user ID, the binding signature will also use that digest.  For #2, you do 
understand correctly.

David


_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Reply via email to