In T7183#188348, @ebo wrote:

I'm not sure if we are talking about the Encrypt-to-self drop-down or the Encrypt for others input fields. On the other hand, I see little reason to treat both differently.

At the moment they are treated differently. In the dropdown for encrypt-to-self no expired certificates are listed. encrypt-to-others does not have a dropdown. You are not able to find an expired Certificate by typing the name. But you can open the certificate list to chose from, where expired certificates are shown and selectable.

I agree with Ingo and Werner here. In summary

fixed in https://invent.kde.org/pim/kleopatra/-/merge_requests/243; we were not calling the visibility logic when initially creating the view.

https://invent.kde.org/pim/kleopatra/-/merge_requests/242

• Don't show the tab if the certificate list was empty before the import
• Show tab when any keys were considered, not only when any keys were imported

Show S/MIME keys as coming from LDAP in certificate lookup: https://invent.kde.org/pim/kleopatra/-/merge_requests/237

Done: https://invent.kde.org/pim/kleopatra/-/merge_requests/236

Testing with various versions of kleopatra, I'm getting differing results:

For VSD the key actions "Regenerate key" and "Generate key" should be hidden. (This is in the middle part of the view)