From 8cf59a52b9c64a070f307f5d50ce80ca6dd3269c Mon Sep 17 00:00:00 2001 From: Aminda Suomalainen Date: Sun, 18 Jun 2023 12:43:18 +0300 Subject: [PATCH] gpg: no-import-clean in hopes of avoiding data loss --- .mikaela/gpg.conf | 5 ++++- gpg/gpg.conf | 5 ++++- 2 files changed, 8 insertions(+), 2 deletions(-) diff --git a/.mikaela/gpg.conf b/.mikaela/gpg.conf index 9fabba0b..8c23ded3 100644 --- a/.mikaela/gpg.conf +++ b/.mikaela/gpg.conf @@ -38,7 +38,10 @@ encrypt-to suomalainen@mikaela.info #encrypt-to mikaela+digitalents@mikaela.info # Ignore preferred keyserver and also import non-self-sigs -keyserver-options no-honor-keyserver-url,no-self-sigs-only +# WARNING! DoS hole! +keyserver-options no-honor-keyserver-url,no-self-sigs-only,no-import-clean,no-import-minimal +import-options no-self-sigs-only,no-import-clean,no-import-minimal + # The defaults are apparently self-sigs-only,import-clean starting from # gpg 2.2.17, but there seem to be controversial views on them and I need # some not-self-sigs with `--fetch-keys` diff --git a/gpg/gpg.conf b/gpg/gpg.conf index 490c18a1..d3d60d77 100644 --- a/gpg/gpg.conf +++ b/gpg/gpg.conf @@ -38,7 +38,10 @@ #encrypt-to mikaela+digitalents@mikaela.info # Ignore preferred keyserver and also import non-self-sigs -keyserver-options no-honor-keyserver-url,no-self-sigs-only +# WARNING! DoS hole! +keyserver-options no-honor-keyserver-url,no-self-sigs-only,no-import-clean,no-import-minimal +import-options no-self-sigs-only,no-import-clean,no-import-minimal + # The defaults are apparently self-sigs-only,import-clean starting from # gpg 2.2.17, but there seem to be controversial views on them and I need # some not-self-sigs with `--fetch-keys`