It seems that
--digest-algo is only used when generating signatures and ignored when used with
--verify, but I find the documentation unclear:
nameas the message digest algorithm. Running the program with the command
--versionyields a list of supported algorithms. In general, you do not want to use this option as it allows you to violate the OpenPGP standard.
--personal-digest-preferencesis the safe way to accomplish the same thing.
- gpg does not throw an error if
--verifyare used together.
- A message may specify a
Hashheader, but it is optional...
It suggests that in some obscure situation, the recipient might need to specify
--digest-algo when verifying a signature.
Would be nice to have a definitive answer.