I checked all current Kleopatra settings described in https://gnupg.com/vsd/kleopatra-settings.html and propose some adjustments:
**Config order**
- Update current read order (see https://dev.gnupg.org/T5707#207732 ):
1. HKEY_LOCAL_MACHINE\Software\Wow6432node\GNU\Kleopatra
2. HKEY_CURRENT_USER\Software\GNU\Kleopatra
3. C:\Program Files (x86)\GnuPG VS-Desktop\share\kleopatrarc
4. %LOCALAPPDATA%\kleopatrarc
- Maybe instead of read order (technical implementation) use precedence order (probably more user friendly)
**Remove options**
- `RemarkSettings`: The group is obsolete, setting `UseTags=false` has no effect. The section should be removed.
- `KDE Action Restrictions`: some options seem to have no effect (better recheck before removal):
- action/configure_backend
- action/help_show_compendium
- action/tools_start_kwatchgnupg
- action/view_certificate_overview
**Fix options**
- All options in the groups `FileOperations` and `Tooltip` need to be written in dash separated notation, see https://dev.gnupg.org/T7899#207813
**Add options**
- `FileOperations / AutoExtractArchives`
**Enhance Description**
- `Notifications / ShowExpiryNotifications`: "Kleopatra will show notifications in some place" -> "on certificate selection"
- `KDE Action Restrictions`: Many options don't restrict the described functionality but only remove the actions (menu, shortcuts).
Maybe add one sentence to make this clear for the reader.
- Add current default value if possible
- `CertificateCreationWizard / ValidityPeriodInDaysMin`
- `CertificateCreationWizard / ValidityPeriodInDaysMax`
- `Certification / CertificationValidityInDays`
- `DN / AttributeOrder`
**Current Bugs** (not sure, if this should be documented until it is fixed)
- `CMS / AllowSigning` not fully functional, see https://dev.gnupg.org/T7910
- `KDE Action Restrictions` can't be set in `%LOCALAPPDATA%\kleopatrarc`, see https://dev.gnupg.org/T5707#207486
---
Just for documentation purposes here I'll list the `KDE action restrictions`, where functionality is still available elsewhere after being set to false:
- **certificates_add_userid**: still possible via //Certificate Details -> Add User ID//
- **certificates_change_expiry**: still possible via //Certificates Details -> Edit: Valid until, Subkeys -> Change validity//
- **certificates_change_passphrase**: still possible via //Certificates Details -> Change Password//
- **certificates_revoke_certification**: still possible via //Certificates Details / Certifications -> Revoke Certification//
- **file_decrypt_verify_files**: still possible via Drag&Drop
- **file_export_certificates**: still possible via //Certificates Details -> Export//
- **file_export_secret_keys**: subkey export still possible via //Certificates Details / Subkeys -> ContextMenu: Export secret subkey//
- **file_import_certificates**: still possible via //Drag&Drop// and initial screen on empty keyring
- **file_new_certificate**: new smime cert still possible via menu
- **file_sign_encrypt_files**: still possible via Drag&Drop
- **file_sign_encrypt_folder**: still possible via Drag&Drop
- **tools_refresh_openpgp_certificates**: still possible for single certs
- **tools_refresh_x509_certificates**: still possible for single certs
- **view_certificate_details**: still possible via doubleclick
maybe not as intended:
- **configure_groups**: still possible via toolbar icon //Groups//
- **window_close_tab**: still possible via context menu of unselected tab
- **window_duplicate_tab**: still possible via context menu of unselected tab
- **window_move_tab_left**: still possible via context menu of unselected tab
- **window_move_tab_right**: still possible via context menu of unselected tab
- **window_rename_tab**: still possible via context menu of unselected tab
- **window_view_hierarchical**: menu entry still displayed, but disfunctional