David Srbecky wrote:
I take it as that you advice to include preference=sign,encrypt
Yes, that would be better.
Out of curiosity, is there any difference between
preference=sign,encrypt and preference=encrypt,sign ? I mean, does the
order matter? Can you both sign encrypted message and encrypt signed
message? (Where the later means that you can not verify signature until
you decrypt the message)
The order does matter, but in OpenPGP (IIRC) there
is only sign-then-encrypt. Other systems offer
different orders.
Another possibility is that there are two forms of
signature - being cleartext and binary. These two
are certainly subject to preferences so you might
want to include them some how.
Then there is the issue of format for delivery,
which would be either of ascii-armored, binary
attachment, or pgp/mime.
(out of those, my setting would be encrypt,ascii).
Some or all of these may be expressed in the preferences
in the keys themselves in some sense.
iang