summary refs log tree commit diff stats
path: root/gnupg
diff options
context:
space:
mode:
authorAlan Pearce2019-06-30 12:42:31 +0200
committerAlan Pearce2019-06-30 12:43:09 +0200
commit5d314760c15cb68ca79f38a1b019d155ef961e62 (patch)
tree41098044d2f35514c19e7620414a27bad3a79c8f /gnupg
parent09a0a4528c94f8b8164671a71d469578d06be283 (diff)
downloaddotfiles-5d314760c15cb68ca79f38a1b019d155ef961e62.tar.lz
dotfiles-5d314760c15cb68ca79f38a1b019d155ef961e62.tar.zst
dotfiles-5d314760c15cb68ca79f38a1b019d155ef961e62.zip
GnuPG: switch to OpenPGP keyserver
Diffstat (limited to 'gnupg')
-rw-r--r--gnupg/.gnupg/dirmngr.conf7
-rw-r--r--gnupg/.gnupg/gpg.conf5
2 files changed, 5 insertions, 7 deletions
diff --git a/gnupg/.gnupg/dirmngr.conf b/gnupg/.gnupg/dirmngr.conf
index cb8030b..f69421d 100644
--- a/gnupg/.gnupg/dirmngr.conf
+++ b/gnupg/.gnupg/dirmngr.conf
@@ -1,4 +1,3 @@
-keyserver hkps://hkps.pool.sks-keyservers.net
-keyserver hkp://jirk5u4osbsr34t5.onion
-use-tor
-#hkp-cacert ~/.gnupg/sks-keyservers.netCA.pem
+keyserver hkps://keys.openpgp.org
+# keyserver hkp://zkaan2xfbuxia2wpf7ofnkbz6r5zdbbvxbunvp5g2iebopbfc4iqmbad.onion
+# use-tor
diff --git a/gnupg/.gnupg/gpg.conf b/gnupg/.gnupg/gpg.conf
index 85a41f4..61df93c 100644
--- a/gnupg/.gnupg/gpg.conf
+++ b/gnupg/.gnupg/gpg.conf
@@ -3,7 +3,6 @@
 # https://help.riseup.net/en/security/message-security/openpgp/best-practices
 #
 
-
 #-----------------------------
 # default key
 #-----------------------------
@@ -43,7 +42,7 @@ use-agent
 
 # This is the server that --recv-keys, --send-keys, and --search-keys will
 # communicate with to receive keys from, send keys to, and search for keys on
-keyserver hkps://hkps.pool.sks-keyservers.net
+keyserver hkps://keys.openpgp.org
 
 # Provide a certificate store to override the system default
 # Get this from https://sks-keyservers.net/sks-keyservers.netCA.pem
@@ -59,11 +58,11 @@ keyserver hkps://hkps.pool.sks-keyservers.net
 # When using --refresh-keys, if the key in question has a preferred keyserver
 # URL, then disable use of that preferred keyserver to refresh the key from
 keyserver-options no-honor-keyserver-url
-
 # When searching for a key with --search-keys, include keys that are marked on
 # the keyserver as revoked
 keyserver-options include-revoked
 
+
 #-----------------------------
 # algorithm and ciphers
 #-----------------------------