Home GnuPG

Lookup validity field to check if keys are valid

Description

Lookup validity field to check if keys are valid

Currently, the code checks the Ownertrust field [1] to look if a key
should be considered as valid. However, the Ownertrust field should not
be deemed to represent the level of confidence that a key is valid.
Rather, it represents how much the user trusts in the owner of the key
to understand correctly how key signing works and to strictly check
fingerprints before signing keys. Ownertrust is used as input by the
trust models to compute the validity of keys, which is printed by GnuPG
in the Validity field.

This commit changes the code to check the Validity field instead of the
Ownertrust field.

Keys which are at least marginally valid are also included in the user
list dialog, however keys which are not fully valid are printed with
dark orange background.

[1] http://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=blob_plain;f=doc/DETAILS

Details

Provenance
Paulo Matias <matias@ufscar.br>Authored on Sep 27 2016, 7:50 PM
Parents
rGPGPASSf7635c045d3e: Updated CHANGELOG
Branches
Unknown
Tags
Unknown

Event Timeline