--status-file output, trust and encryption

Colin Granville colin.granville at gmx.co.uk
Sat Dec 10 20:59:02 CET 2005


Hi

I'd like to propose a change to the --status-file output when 
encrypting a message.

In batch mode when you encrypt a message where the recipient isn't 
trusted the encryption fails and INV_RECP 10 is output to the status 
file. If I use '--trust-model always' the encryption says nothing of 
the status of the recipient.

What I want to do is give the user the option to send the message if 
the recipient isn't trusted.

At present I have to try to encrypt the message and if I get a INV_REP 
10 I tell the user that the receiver isn't trusted and if he wants to 
continue encrypt again with '--trust-model always'.

The problem is that the level of trust is not output in the status 
file - which would be useful for the user to make a decision as to 
whether or not to continue,

Also I have to run gpg twice which slows things down.

What I propose is that encrypt always outputs the recipients trust 
level using the same trust output as when you verify a message ie 
TRUST_MARGINAL,TRUST_FULL,TRUST_ULTIMATE etc.

Then I can encrypt with --trust-always and if the recipient isn't 
fully trusted then I can ask if the user wants to continue - with 
trust level info - and if he does the message is already encrypted

Thank you.

-- 
Colin



More information about the Gnupg-devel mailing list