Kleopatra: "Not certified" Status for Validity with multiple user ids
Open, WishlistPublic

Assigned To
None
Authored By
• aheinecke
Sep 21 2022, 12:34 PM

Description

The Problem is that if a key has mutliple userids and one does only certify one of these the overall status is "not certified".
This is something I do not have a good answer to resolve. Maybe another "partially certified" state?

I have a good example where this happens in my keyring. Filtering for trusted-certificates, I was slightly confused why it inlcuded "non certified" certificates:

So when I look at the table, the primary userid would be certified, but not the others. :/ Even just indicating that the certificate has more userids might be a user experience improvement in this case so maybe we should add that as an optional column?

It is also a bit of a problem we have in VS-NfD. To workaround this we defined "All UserIDs must be certified" for VS-NfD. So if a public key adds a uid on update, it might switch from compliant to non-compliant.

Open to suggestions.

Event Timeline

• aheinecke created this task.

I think showing "partially certified" makes sense.

For VS-NfD I have no opinion.

I just thought, that we should still show "not certified" if the primary user ID is not certified because Kleopatra always displays the primary user ID (except in the Certificate Details).

• ikloecker mentioned this in Unknown Object (Maniphest Task).Aug 2 2023, 12:28 PM
• ebo edited projects, added gpd5x; removed Restricted Project.Mar 7 2025, 11:12 AM
• ebo added a subscriber: • ebo.

I think "not certified" is ok if several UIDs with different certification states exist.

I would be open to an additional (probably by default hidden) column indicating multiple UIDs, though I do not consider this necessary. The improved details view is only one double-click away.

But really, if a certificate becomes "not certified" after a refresh, just certify again.
Needs only be done locally and no additional fingerprint check necessary if you certified one UID before.