X-Git-Url: https://git.notmuchmail.org/git?p=notmuch;a=blobdiff_plain;f=doc%2Fman1%2Fnotmuch-config.rst;h=1a9e08a3e805b76b88bb8367e167fb714600ce9d;hp=6961737f3d220b2b6478780acfd4bfe5c65db7c0;hb=076f86025d519522cde5787def6c03fc308e8ebc;hpb=7ac96b149f5a0e5c03b64856d7c20789dab3c628 diff --git a/doc/man1/notmuch-config.rst b/doc/man1/notmuch-config.rst index 6961737f..1a9e08a3 100644 --- a/doc/man1/notmuch-config.rst +++ b/doc/man1/notmuch-config.rst @@ -138,18 +138,23 @@ The available configuration items are described below. Default: ``gpg``. - **index.try_decrypt** + **index.decrypt** **[STORED IN DATABASE]** When indexing an encrypted e-mail message, if this variable is - set to true, notmuch will try to decrypt the message and index - the cleartext. Be aware that the index is likely sufficient - to reconstruct the cleartext of the message itself, so please + set to ``true``, notmuch will try to decrypt the message and + index the cleartext. If ``auto``, it will try to index the + cleartext if a stashed session key is already known for the message, + but will not try to access your secret keys. Use ``false`` to + avoid decrypting even when a session key is already known. + + Be aware that the notmuch index is likely sufficient to + reconstruct the cleartext of the message itself, so please ensure that the notmuch message index is adequately protected. - DO NOT USE ``index.try_decrypt=true`` without considering the + DO NOT USE ``index.decrypt=true`` without considering the security of your index. - Default: ``false``. + Default: ``auto``. **built_with.**