On Sun, Jul 17, 2005 at 04:00:59PM +0200, Werner Koch wrote:
> Add:
> 
> encrypt-to 12345678!
> encrypt-to 9abcdef0!
> 
> to your gpg.conf.  The two keys are the keyIDs of the respective
> subkeys.  Don't forget the exclamation mark to force gpg to use
> excactly these subkeys.

That doesn't help me at all, of course -- I very rarely encrypt stuff to
myself.

> You can't however force others to encrypt to a specific key; this is
> not defined by OpenPGP and we don't implement the highly questionable
> ARR PGP provides.

Well, does OpenPGP specify at all which subkeys to encrypt to? Is there a
good reason why GnuPG simply can't encrypt to both by default?

> Another way to solve this is by generating the key on the host and
> transferring a copy to the smartcard.  Off-card generation is actually
> the default for smartcard encryption keys.

Mm, but then I'd have to revoke the old encryption subkey to work around what
I consider is a bug in GnuPG, and I'd hate accumulating cruft for such
reasons :-/

/* Steinar */
-- 
Homepage: http://www.sesse.net/


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to