X-Git-Url: https://the.earth.li/gitweb/?a=blobdiff_plain;f=onak.ini.in;h=dc68e1f0173f6df9a8d8aea404313787d66ef93d;hb=da8b732cf8223bbd4f5bc45a7db1d430fb531bf2;hp=8989f0704a28832ed4685c8671b562bf1fd32c98;hpb=2708d5a06ad2ef872ea89aca822328f98a86e7cb;p=onak.git

diff --git a/onak.ini.in b/onak.ini.in
index 8989f07..dc68e1f 100644
--- a/onak.ini.in
+++ b/onak.ini.in
@@ -16,12 +16,19 @@ max_reply_keys=128
 
 ; Settings related to key verification options available.
 [verification]
+; Blacklist certain fingerprints (e.g. EVIL32). One fingerprint per line,
+; comment lines start with #
+;blacklist=blacklist.txt
 ; Verify signature hashes - verify that the hash a signature claims to be
 ; over matches the hash of the data. Does not actually verify the signature.
 check_sighash=true
 ; Drop v3 (and older) keys. These are long considered insecure, so unless there
 ; is a good reason you should accept this default.
 drop_v3=true
+; Only allow keys that already exist to be update; silently drop the addition
+; of any key we don't already know about. Useful for allowing updates to
+; curated keys without the addition of new keys.
+;update_only=false
 
 ; Settings related to the email interface to onak.
 [mail]