X-Git-Url: https://git.notmuchmail.org/git?a=blobdiff_plain;f=doc%2Fman1%2Fnotmuch-insert.rst;h=214f261ba6b00f95a3eb036f535c9ca992978708;hb=29648a137c5807135ab168917b4a51d5e19e51c2;hp=c500b251b571546a9c7ac8548c92405d3a328c58;hpb=733ccfabca350f65a1d0ba1f64792a8a436da273;p=notmuch diff --git a/doc/man1/notmuch-insert.rst b/doc/man1/notmuch-insert.rst index c500b251..214f261b 100644 --- a/doc/man1/notmuch-insert.rst +++ b/doc/man1/notmuch-insert.rst @@ -51,19 +51,24 @@ Supported options for **insert** include ``--no-hooks`` Prevent hooks from being run. - ``--try-decrypt=(true|false)`` - - If true and the message is encrypted, try to decrypt the - message while indexing. If decryption is successful, index - the cleartext itself. Either way, the message is always - stored to disk in its original form (ciphertext). Be aware - that the index is likely sufficient to reconstruct the - cleartext of the message itself, so please ensure that the + ``--decrypt=(true|auto|false)`` + + If ``true`` and the message is encrypted, try to decrypt the + message while indexing, storing any session keys discovered. + If ``auto``, and notmuch already knows about a session key for + the message, it will try decrypting using that session key but + will not try to access the user's secret keys. If decryption + is successful, index the cleartext itself. Either way, the + message is always stored to disk in its original form + (ciphertext). + + Be aware that the index is likely sufficient to reconstruct + the cleartext of the message itself, so please ensure that the notmuch message index is adequately protected. DO NOT USE - ``--try-decrypt=true`` without considering the security of + ``--decrypt=true`` without considering the security of your index. - See also ``index.try_decrypt`` in **notmuch-config(1)**. + See also ``index.decrypt`` in **notmuch-config(1)**. EXIT STATUS ===========