[Pkg-kde-bugs-fwd] [Bug 44699] can't encrypt with gpg if the receiver's key is not signed

23 Feb 2005 21:21:02 -0000

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
You are a voter for the bug, or are watching someone who is.

http://bugs.kde.org/show_bug.cgi?id=44699         
pkg-kde-bugs-fwd lists alioth debian org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |pkg-kde-bugs-
                   |                            |fwd lists alioth debian org

------- Additional Comments From pkg-kde-bugs-fwd lists alioth debian org  2005-02-23 22:20 -------
This is also Bug#296601 in the Debian BTS (http://bugs.debian.org/296601). We (the Debian KDE maintainers) really feel that the user should be able to force the use of an untrusted key, if he wishes so. Although there is --lsign, this can be a "dangerous misfeature" too; as one developer put it, "it is worse to sign locally and then forget forever about the whole affair and later think the key has been really signed by someone in your trust path, than to have a warning pop up every time you try to use an unverified key".

Thanks for considering.