According to this guide (outdated though, but this still applies) [1], `--with-fingerprint`, as even the long ID can be spoofed. [1]: https://riseup.net/en/sec

According to this guide (outdated though, but this still applies) [1], `--with-fingerprint`, as even the long ID can be spoofed. [1]: https://riseup.net/en/security/message-security/openpgp/best-practices#dont-rely-on-the-key-id https://riseup.net/en/security/message-security/openpgp/best...