gpg: Add "self-sigs-only" and "import-clean" to the keyserver options.
authorWerner Koch <wk@gnupg.org>
Thu, 4 Jul 2019 13:45:39 +0000 (15:45 +0200)
committerDaniel Kahn Gillmor <dkg@fifthhorseman.net>
Thu, 22 Aug 2019 19:11:59 +0000 (20:11 +0100)
commit9fbcec394ae46040294c9df849e4c26580f0d9b2
tree07fccfc0057c9b9e7cd2616aab795a2623ce76e4
parentbad8496fd44a62fdbbd768f7679f90eb56d739f7
gpg: Add "self-sigs-only" and "import-clean" to the keyserver options.

* g10/gpg.c (main): Change default.
--

Due to the DoS attack on the keyeservers we do not anymore default to
import key signatures.  That makes the keyserver unsuable for getting
keys for the WoT but it still allows to retriev keys - even if that
takes long to download the large keyblocks.

To revert to the old behavior add

  keyserver-optiions  no-self-sigs-only,no-import-clean

to gpg.conf.

GnuPG-bug-id: 4607
Signed-off-by: Werner Koch <wk@gnupg.org>
(cherry picked from commit 23c978640812d123eaffd4108744bdfcf48f7c93)
(cherry picked from commit 2b7151b0a57f5fe7d67fd76dfa1ba7a8731642c6)

Gbp-Pq: Topic from-2.2.17
Gbp-Pq: Name gpg-Add-self-sigs-only-and-import-clean-to-the-keyserver-.patch
doc/gpg.texi
g10/gpg.c