--verbose
evidently one would have to be using the --verbose option in order ro get hit with the signature spoof bug.
see
https://lists.gnupg.org/pipermail/gn...q2/000425.html
the --verbose option should be in the "configuration file -- and -- this should be found in the /home directory under .gnupg/gpg.conf
mine doesn't have much in it -- just the default keyserver and the default secret key --
+ i wonder if they are using a data base now ?
+ another concern of course is that an e/mail interface program might specify the --verbose option when calling for gpg
best is to get the latest gpg; i'll have to see what Debian sez about getting that down load.
