X-Git-Url: https://git.notmuchmail.org/git?p=notmuch;a=blobdiff_plain;f=doc%2Fman1%2Fnotmuch-insert.rst;h=214f261ba6b00f95a3eb036f535c9ca992978708;hp=eb9ff11bac289ac8b048db44798983d12e14780f;hb=29648a137c5807135ab168917b4a51d5e19e51c2;hpb=d3964e81ac98825a025a6120c488ebd73de2a281 diff --git a/doc/man1/notmuch-insert.rst b/doc/man1/notmuch-insert.rst index eb9ff11b..214f261b 100644 --- a/doc/man1/notmuch-insert.rst +++ b/doc/man1/notmuch-insert.rst @@ -51,14 +51,19 @@ Supported options for **insert** include ``--no-hooks`` Prevent hooks from being run. - ``--decrypt=(true|false)`` - - If true and the message is encrypted, try to decrypt the - message while indexing. If decryption is successful, index - the cleartext itself. Either way, the message is always - stored to disk in its original form (ciphertext). Be aware - that the index is likely sufficient to reconstruct the - cleartext of the message itself, so please ensure that the + ``--decrypt=(true|auto|false)`` + + If ``true`` and the message is encrypted, try to decrypt the + message while indexing, storing any session keys discovered. + If ``auto``, and notmuch already knows about a session key for + the message, it will try decrypting using that session key but + will not try to access the user's secret keys. If decryption + is successful, index the cleartext itself. Either way, the + message is always stored to disk in its original form + (ciphertext). + + Be aware that the index is likely sufficient to reconstruct + the cleartext of the message itself, so please ensure that the notmuch message index is adequately protected. DO NOT USE ``--decrypt=true`` without considering the security of your index.