We have some customers who have an offline computer for sensitive data. There, dirmngr should not be started except to manually import crls retrieved via another machine. We advise such customers to set disable-dirmngr in gpg.conf and gpgsm.conf and set disable-crl-checks in the latter file, too.

There are some occasions where the dirmngr is started, for regular S/MIME CRL-checks (those arecovered by the above settings) for pubkey search or -update via WKD and (on current master) to connect to AD on Windows, when suggesting Name an Mail when generating a keypair or CSR.

At the very least Kleopatra should honor the disable-dirmngr settings in gpg.conf and gpgsm.conf in all cases. For 3.3.7 and 5.0.2 the dirmngr is startet for WKD searches despite the settings and for master later than 5.0.2 dirmngr is started generally after startup (for the AD search which then needs dirmngr because of T6094).

But I would like to have a Registry key for Kleopatra, e.g. "Offline", which would with one setting set all the sensible settings for that case at once without needing to go to the config files. This would be easier for customers to configure. The regkey should set disable-dirmngr for gpg and gpgsm and disable-crl-checks, too.