http://vww6ybaluuo4gfuuf6zvlt23hvg2pcfayco5iiwhv3plo6o7bewivoid.onion/zh/security/message-security/openpgp/gpg-best-practices
To fix this, first, you should set the following in your ~/.gnupg/gpg.conf : cert-digest-algo SHA512 Second, you should generate a new self-signature on your key (e.g. by changing the key’s expiration date ). self-signatures should not use SHA1 You can check this by doing: gpg --export-options export-minimal --export '<fingerprint>' | gpg --list-packets | grep -A 2 signature | grep 'digest algo 2,' If you see any ‘digest algo 2’ results printed, then you...