This is nothing we want to do in Kleopatra. The "Force" button will be removed shortly even for MDC error.

Please add the hint you mentioned.

The fix is only a workaround, the duplicate entries are no longer shown in Kleopatra, they still exist and multiply on save.

How about "Certification includes that you check the fingerprint against a trusted source."? "Means" seems wrong to me. @hej, please comment

ok, lets do this. I'll update the description

How about changing the text after sentence two simply to:

Do we agree to drop bolt font for QES certificates?
Will we change this for VSD 3.4?

This ticket is now obsolete, as we will force the setting of autoencryptUntrusted=0 via the registry in Ticket T8090

Maybe we could show instead the text "No keyserver is configured."? Need not be in the same place. This would also be helpful in the other case, where you go to the search via "Lookup on Server". Showing which keyservers are configured would be nice too, of course.

Forget my comment above. Or consider it as the "before" part of the task description…

Fixed for KF6 versions.

Meanwhile all executables are signed.

You are totally correct, confirmed with VSD 3.3.5.

This ticket is only for ignoring the autoencryptUntrusted setting. For the gpgolconfig.exe part see T8090

I might add that we recently had a customer support contact where they had that error and asked how they could make using their S/MIME certificates work.

For "expired signature with certified key" I believe green with check mark is a too positive. Should be a warning, too.

The text is exactly as discussed and I'm OK with the layout, too.

I was told to only fix this in the German translation, as otherwise all other translations would have to be updated.
I'll push the translations shortly.

I currently have a slight preference to drop bold and go with normal font. Werner would be ok with that, too.

checked with vsd 3.3.5: no change

Highlighting QES is mostly useful for Okular, I guess.
Maybe use a symbol with a pen? That should be self-explanatory.

We'll go with solution no 2 (which is in effect the same as no 1 anyway)

I misunderstood this, the mail can be forwarded with attachment if you first deselect the mail and then select it again. So the workaround is OK.

a) Info given by @mmontkowski: decryption can't be disabled

Well, the qual flag should only be set for CAs dedicated to certifying QES certificates. And those should by definition be signature certificates only, afaik.

works in vsd 3.3.5