In VSD installations the status column of lines belonging to certificates that have algorithms which are compliant with VS-NfD show the string "VS-NfD compliant", to denote this.
This short form could mislead a user into thinking the certificate has definitively to be compliant.
But we can not know if a certificate really is compliant, as for this we would need additional information which is not available (not only would the program which was used for creation have to be known, the compliance state of the machine would have to be considered and if the users comply to the procedures, too).
Although users are expected to read about this in the handbook, we should add a tooltip to explain this a bit better.
Default text: "The algorithm of this certificate is VS-NfD compliant"/"Der Algorithmus dieses Zertifikats ist VS-NfD konform".
("VS-NfD compliant" is a variable here, alternate possibilities are: "EU Restricted", "NATO Restricted" and the German "VS-NfD konform".)
The tooltip should optimally be configureable e.g. by the organizations security officer to fit their organizational procedures / needs.
We could possibly implement this similar to the tooltips for pinentry and in the same file:
On a GNU or Unix system the entry is searched in these files: /etc/gnupg/help.LL.txt /etc/gnupg/help.txt /usr/share/gnupg/help.LL.txt /usr/share/gnupg/help.txt Here LL denotes the two digit language code of the current locale.
But as we want to use this text in Kleopatra,
/etc/xdg/libkleopatrarc
would be better. This should be configurable via the registry, too, but the text may in this case have no line breaks.
Has relation to T7504, should be worked on in parallel.