> What do you kind folks out there make of comments at > https://stallman.org/gpg.html
Completely orthodox. Certificates retrieved through the keyserver network should not be trusted until/unless verified. Some people are moving to embrace TOFU, which changes these rules somewhat. For my money, though, I don't (and won't) use TOFU. _______________________________________________ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
