GnuPG: Changing the trust model once changes the default trust model
Closed, ResolvedPublic

Description

If you don't have a trust model configured and you do:

{{{
gpg -k --with-colons --with-tofu-info --trust-model tofu+pgp aheinecke@intevation.de
}}}

The "default" trust model if you do not provide it on the command line will from then on be "tofu+pgp".

e.g.
{{{
gpg -k --with-colons --with-tofu-info aheinecke@intevation.de
}}}
Will still show the tofu info.

This is a very bad side effect and makes it impossible to properly switch the trust model only for some operations or in one application. I know that the idea is not to switch trust models so often, but as a first step to adapt tofu+pgp in only some applications (like GpgOL). It would be great if that would be possible without affecting the whole system.

I think this is a bug.

aheinecke created this task.Sep 6 2018, 3:13 PM
aheinecke added projects: gpgol, gpg4win.

Added gpgol and gpg4win project tags as this is important for these projects.

Maybe prio high? I reported this to neal back in 2016 ;-)

werner raised the priority of this task from Normal to High.Sep 6 2018, 10:22 PM
werner changed the task status from Open to Testing.Oct 10 2018, 11:47 AM
werner closed this task as Resolved.Dec 11 2018, 3:51 PM

Fix was released with 2.2.11