``` # Use sks keyservers pool # http://vww6ybal4bd7szmgncyruucpgfkqahzddi37ktceo3ah7ngmcopnpyyd.onion/en/security/message-security/o penpgp/best-practices keyserver hkps://hkps.pool.sks-keyservers.net keyserver-options no-honor-keyserver-url # Always show key fingerprints with-fingerprint #keyid-format long # Security hardening from https://bettercrypto.org/#hashing personal-digest-preferences SHA512 cert-digest-algo SHA512 default-preference-list AES256 CAMELLIA256 AES192 CAMELLIA192 AES CAMELLIA128 TWOFISH SHA512 SHA384 SH A256 BZIP2 ZLIB ZIP weak-digest SHA1 weak-digest SHA224 ```