diff --git a/gnupg/gpg.conf b/gnupg/gpg.conf
index 5d0a4ea..613e477 100644
--- a/gnupg/gpg.conf
+++ b/gnupg/gpg.conf
@@ -10,14 +10,21 @@ default-key 0x384E1FED4AFE4843543277E5D7CEBBD33A7676E7
 no-emit-version
 no-comments
 
+# tofu
+trust-model tofu+pgp
+tofu-default-policy unknown
+
 # prefer long key format
 keyid-format 0xlong
 
+# list all keys along with their fingerprints
 with-fingerprint
 
+# show uid validity when listing and verifying
 list-options show-uid-validity
 verify-options show-uid-validity
 
+# use the gpg agent
 use-agent
 # }}}