Re: Adding support for fetching GPG key using WKD protocol

2018-07-05 Thread Fabian Groffen
Hi, Just wondering, I've got "auto-key-retrieve" set in my gpg.conf. I'm using gpgme, and as far as I'm aware it fetches keys it doesn't know upon reading the message (gives a little delay) to verify the signature is OK. Is this a different thing somehow? Thanks, Fabian On 04-07-2018 23:27:23

Re: Adding support for fetching GPG key using WKD protocol

2018-07-05 Thread Wiktor Kwapisiewicz
Hi, Just wondering, I've got "auto-key-retrieve" set in my gpg.conf. I'm using gpgme, and as far as I'm aware it fetches keys it doesn't know upon reading the message (gives a little delay) to verify the signature is OK. Is this a different thing somehow? Yes, auto-key-retrieve is different f

Re: Adding support for fetching GPG key using WKD protocol

2018-07-05 Thread Andras Salamon
On 2018-07-04 18:05:13 -0700, Kevin wrote: > My initial idea was a quadoption to control the external query to WKD. > If no exact-address matches are initially found, consult the quadoption Does this mean that WKD would always be enabled? If so, this potentially leaks from whom email is being rec

Re: Adding support for fetching GPG key using WKD protocol

2018-07-05 Thread Wiktor Kwapisiewicz
> Does this mean that WKD would always be enabled? > If so, this potentially leaks from whom email is being received to third > parties, and I will patch my copy of mutt to remove it. It is triggered only when you want to send an e-mail *to* a person AND explicitly enable encryption AND you don'

Re: Adding support for fetching GPG key using WKD protocol

2018-07-05 Thread Kevin J. McCarthy
On Thu, Jul 05, 2018 at 08:29:08AM +0100, Andras Salamon wrote: > On 2018-07-04 18:05:13 -0700, Kevin wrote: > > My initial idea was a quadoption to control the external query to WKD. > > If no exact-address matches are initially found, consult the quadoption > > Does this mean that WKD would alwa