[pkg-gnupg-maint] Bug#888025: how to integrate ca-certificates with gpgsm (for email s/mime signature verification)

[Jonas Schäfer]

Just a note that this seems to have gotten much worse at least for some users 
in the bookworm testing cycle running kmail. I and at least one other user I 
know about get popups every few hours about some random certificates, probably 
because someone at some point sent me an email with S/MIME.

A proper fix which doesn't involve manually copying down a long fingerprint 
into a configuration file would be much appreciated.