Re: gpg changesets

[Florian Weimer <fw@deneb.enyo.de>]

* Anthony Towns:

> Two ways: either parse the output of gpg as it's running:
>
>    gpg: requesting key CA57AD7C from ldap server keyserver.pgp.com
>    gpg: key CA57AD7C: "PGP Global Directory Verification Key" not changed
>    gpg: Total number processed: 1
>    gpg:              unchanged: 1

Uh-oh.  You really, really should use "--with-colons --fixed-list-mode".
In addition, you should keep an explicit list of primary user IDs; I
don't think you should trust GnuPG's choice for this application
(which will be poor unless you've assigned a lot of trust values,
for which there isn't a real basis).