cert-digest-algo clarification

Sam Smith smickson at hotmail.com
Fri Jul 13 14:33:03 CEST 2012


Thanks everyone for all you help explaining. I really appreciate it. Although Hauke did get a bit mean. And Hauke: I did read ALL the documentation (printed it off)--prior to sending out the first question. I read several different pieces of documentation over the preceding days prior to emailing here. I also read Q&A stuff online. And I'm not stupid.

A big thanks to Nick for helping me finally to understand exactly what lists are being compared. Here's what I understand, hopefully I got it right this time:

default-preferences-list
1) the setpref command will embed this list into the public key so that the list is viewable by others
2) the highest preference listed in each category is used to generate new keys with

personal-digest-preferences AND personal-cipher-preferences AND personal-compress-preferences
1) these lists are used to find a "best fit" by comparing what's in them to the other person's default-preferences-list. Seeks to match highest preference of both parties. (this is what was confusing to me--at first, I thought the default-preferences-list of both parties would be compared.)
2) the highest preference listed is used for --symmetric encryption





From: mailinglisten at hauke-laging.de
To: gnupg-users at gnupg.org
Subject: Re: cert-digest-algo clarification
Date: Thu, 12 Jul 2012 18:39:19 +0200

Am Do 12.07.2012, 12:11:11 schrieb Sam Smith:
> The "setpref" and "showpref" commands appear to only relate to what is
> stipulated with the "default-preference-list".
 
"Appear"? Is that what the documentation says? Do you prefer telling us your 
guesses over reading the neccessary information?
 
 
> Setpref just resorts back to the "default" settings if
> "default-preference-list" is not given.
 
This is true only if setpref is called without arguments.
 
 
> So if one sets
> "default-preference-list" it's not necessary to set
> "personal-digest-preferences", right?
 
Do you read what we tell you? How does this question fit to my statement 
(which you even quote)?
 
The personal-digest-preferences setting in the configuration of other users 
may override the setting you may have made in your key. Your personal-digest-
preferences setting is irrelevant for the signatures of others.
 
 
Stop trying to understand it from reading, you obvously have problems with 
that. Take two keys, give them different preferences, make encrypted 
signatures with different settings of personal-digest-preferences and have a 
look at the results.
 
 
> I mean how are
> "personal-digest-preferences" even seen by others if SETPREF does not embed
> them in the key?
 
As you have been told several times by several people (let alone the clear 
documentation): personal-digest-preferences is not to be seen by others.
 
--personal-digest-preferences is used with
	--sign --encrypt
	affecting a single signature
	affecting what your software does
 
--default-preference-list is used with
	--gen-key
	--edit-key setpref
	affecting the preference lists in a key
	affecting what another person's software does
 
 
Hauke
-- 
PGP: D44C 6A5B 71B0 427C CED3 025C BD7D 6D27 ECCB 5814

_______________________________________________
Gnupg-users mailing list
Gnupg-users at gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: </pipermail/attachments/20120713/a8ecb3c4/attachment.htm>


More information about the Gnupg-users mailing list