On export (of individual certificates), export all user IDs and inform the user if there were not certified user IDs.
On exporting a not/partially certified group, inform the user and ask if they want to certify the group now.
This is a follow-up task to T6469: Kleopatra: Certify a group.
| rLIBKLEO Libkleo | |||
| rLIBKLEO41c026588103 Add helper to partition a list of keys by protocol | |||
| rLIBKLEO79aa8c5fa4e5 Add function to check if a user ID was certified by the user | |||
| rKLEOPATRA Kleopatra | |||
| rKLEOPATRA04e4e7595eda Add an explanation why sharing uncertified certificates may be problematic | |||
| rKLEOPATRA1b7622d02932 Allow user to silence the confirmation messages | |||
| rKLEOPATRAc38a9df2a2ca Request confirmation when uploading uncertified OpenPGP keys | |||
| rKLEOPATRA9b2a2a6a22d9 Request confirmation when exporting uncertified OpenPGP keys | |||
| rKLEOPATRA24ba61e6b142 Explicitly mention that exportable certifications are missing | |||
| rKLEOPATRAab01a2d434b5 Always finish command properly and don't emit canceled manually | |||
| rKLEOPATRA187c11841e24 Use helper to partition keys by protocol | |||
| rKLEOPATRA049d4bb51fe7 Emit canceled when the user canceled the export | |||
| rKLEOPATRA835c298b2a5f Ask for confirmation before exporting group with uncertified OpenPGP keys | |||
| rKLEOPATRA9d5f352dac12 Always enable loading of remarks in the key cache | |||
Questions:
Possible compromise:
On second thought, I think going for confirmation if not all certificates are certified by the user with an exportable certification is the sensible approach. I'll add a "Don't ask me again" option, so that users who don't care or don't understand what they are asked can disable the confirmation.
I have added the confirmation to the following commands:
I haven't added the possibility to start a group certification directly from the confirmation message.
I think this is useful. Also with the other message regarding exportable certifycations. I think the next step for the user would be to certify them.
While you are at it. Please change "exportable" to something understandable for users like "certifications which others can see" or something like that.
VS-Desktop-3.1.90.258-Beta:
Works, the confirmation is asked in all 3 cases.
And the confirmation dialog can be turned of for each of the cases separately. Although that is not really obvious from the text.
But this decision can not be changed again, unfortunately. I would prefer if it was configurable in a config file...
Whether the confirmation dialogs are shown is configurable in the config file (just like any other "Don't show again" option, e.g. the question asked when you quit Kleopatra). Simply remove the corresponding entries in the [Notification Messages] section to make Kleopatra show the confirmation dialogs again.
On Windows, the notifications are currently configured in kleopatra.kmessagebox, or more accurately, the wish not to notify is configured there:
[General] confirm-export-of-uncertified-keys=4 confirm-upload-of-uncertified-keys=4 confirm-export-of-uncertified-groups=4
See T6799, too