We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 49c9826 commit 164a243Copy full SHA for 164a243
gnupg/gpg.conf
@@ -52,4 +52,9 @@ default-preference-list SHA512 SHA384 SHA256 SHA224 AES256 AES192 AES CAST5 ZLIB
52
personal-cipher-preferences AES256 AES192 AES CAST5
53
s2k-cipher-algo AES256
54
s2k-digest-algo SHA512
55
-cert-digest-algo SHA512
+cert-digest-algo SHA512
56
+
57
+# When verifying a signature made from a subkey, ensure that the cross
58
+# certification "back signature" on the subkey is present and valid. This
59
+# protects against a subtle attack against subkeys that can sign.
60
+require-cross-certification
0 commit comments