gpg.conf

# Tell GnuPG that I want maximum OpenPGP conformance.
openpgp

# Disable a few messages from GnuPG that I know I don’t need.
# no-greeting
# no-secmem-warning

# Don’t include a version number or a comment in my output.
no-emit-version
# no-comments

# Use full 16-character key IDs, not short 8-character key IDs.
keyid-format long

# Use the global keyserver network for certificate lookups.
# Further, whenever I send or receive something to/from the
# keyserver network, clean up what I get or send.
# keyserver pool.sks-keyservers.net
keyserver-options import-clean-sigs import-clean-uids export-clean-sigs export-clean-uids

# If I don’t explicitly state which certificate to use, use this one.
# default-key 1DCBDC01B44427C7

# Always include signatures from these two certificates.
# local-user 1DCBDC01B44427C7

# Always add these two certificates to my recipients list.
# encrypt-to 1DCBDC01B44427C7

# Turn "From" into "> From", in order to play nice with UNIX mailboxes.
escape-from-lines

# Message digest algorithm used when signing a key
cert-digest-algo SHA512

# Prefer strong hashes whenever possible.
personal-digest-preferences SHA512 SHA384 SHA256 SHA224

# Prefer more modern ciphers over older ones.
personal-cipher-preferences CAMELLIA256 AES256 TWOFISH CAMELLIA192 AES192 CAMELLIA128 AES BLOWFISH CAST5 3DES

# Turn up the compression level and prefer BZIP2 over ZIP and ZLIB.
bzip2-compress-level 9
compress-level 9
personal-compress-preferences BZIP2 ZIP ZLIB