tokollo ea lisebelisoa (GNU Privacy Guard), e tsamaellanang le maemo a OpenPGP () le S/MIME, mme e fana ka lits'ebeletso bakeng sa encryption ea data, ho sebetsa ka li-signature tsa elektronike, tsamaiso ea linotlolo le ho fihlella mabenkeleng a bohlokoa a sechaba. Hopola hore lekala la GnuPG 2.2 le behiloe joalo ka tokollo ea nts'etsopele moo likarolo tse ncha li tsoelang pele ho eketsoa; ke litokiso tsa tokiso feela tse lumelletsoeng lekaleng la 2.1.
Taba e ncha e sisinya mehato ea ho hanyetsa , e lebisang ho GnuPG ho fanyehoa le ho sitoa ho tsoela pele ho sebetsa ho fihlela setifikeiti se nang le bothata se hlakotsoe lebenkeleng la lehae kapa lebenkele la setifikeiti le etsoa bocha ho latela linotlolo tsa sechaba tse netefalitsoeng. Tšireletso e ekelitsoeng e ipapisitse le ho iphapanyetsa ka ho felletseng li-signature tsohle tsa mokha oa boraro tsa litifikeiti tse amoheloang ho tsoa ho li-server tsa bohlokoa tsa polokelo. A re hopoleng hore mosebelisi e mong le e mong a ka eketsa signature ea hae ea dijithale bakeng sa litifikeiti tse ikemetseng ho seva sa polokelo ea senotlolo, se sebelisoang ke bahlaseli ho etsa palo e kholo ea li-signature tse joalo (tse fetang likete tse lekholo) bakeng sa setifikeiti sa motho ea hlokofalitsoeng, seo ho se sebetsa ha sona. e senya ts'ebetso e tloaelehileng ea GnuPG.
Ho hlokomoloha li-signature tsa motho oa boraro ho laoloa ke khetho ea "self-sigs-only", e lumellang feela li-signature tsa baetsi ba tsona hore li jarolloe bakeng sa linotlolo. Ho tsosolosa boitšoaro ba khale, o ka eketsa "keyserver-options no-self-sigs-feela, no-import-clean" ho gpg.conf. Ho feta moo, haeba nakong ea ts'ebetso ho fumanoa ho kenngoa ha li-blocks tse ngata, tse tla baka ho tlala ha polokelo ea lehae (pubring.kbx), ho e-na le ho hlahisa phoso, GnuPG e bulela mokhoa oa ho hlokomoloha li-signature tsa digital ("self-sigs). -feela, ntle-ntle”).
Ho nchafatsa linotlolo u sebelisa mochini (WKD) E kentse khetho ea "--locate-external-key" e ka sebelisoang ho etsa lebenkele la setifikeiti ho ipapisitsoe le linotlolo tsa sechaba tse netefalitsoeng. Ha o etsa ts'ebetso ea "-auto-key-retrieve", mochini oa WKD joale o ratoa ho feta li-server tsa bohlokoa. Moko oa WKD ke ho beha linotlolo tsa sechaba tepong ka sehokelo sa domain e boletsoeng atereseng ea poso. Ka mohlala, bakeng sa aterese "[imeile e sirelelitsoe]"Senotlolo se ka khoasolloa ka sehokelo" https://example.com/.well-known/openpgpkey/hu/183d7d5ab73cfceece9a5594e6039d5a ".
Source: opennet.ru