Re: Emacs Cloud

[David Engster <deng@randomsample.de>]

Ted Zlatanov writes:
> On Mon, 03 Feb 2014 09:08:47 +0100 David Engster <deng@randomsample.de> wrote: 
>
> DE> Lars Ingebrigtsen writes:
>>> Julien Danjou <julien@danjou.info> writes:
>>> 
>>>> Pros: no passphrase to enter, GPG agent takes care of it
>>> 
>>> I don't think we can rely on GPG agent being available...
>
> DE> GnuPG 2.x *requires* the agent; it does not make sense to use GnuPG 2.x
> DE> without setting up the agent as well. It was a deliberate design
> DE> decision to have *one* secure daemon for querying and caching
> DE> pass-phrases, instead of leaving this to the applications, which will
> DE> often do it wrong.
>
> I'd argue that Emacs is not an application in any way.

Sorry, I don't get it.

> DE> If you really don't want to use the agent, then just keep using GnuPG
> DE> 1.x, which is actively maintained (and probably will be for a long
> DE> time). Note that you can install GnuPG 1.x alongside GnuPG 2.x with no
> DE> problems, and every recent distribution I know has packages for both.
>
> I've covered all of this with Stefan and Daiki Ueno in the discussions I
> referenced, from my reasoning to annoying issues with the GPG daemon's pinentry.

I know, and I don't plan to repeat this discussion here. Using pinentry
has its problems, especially on remote terminals, but IMHO it makes no
sense to work against the design of GnuPG v2. If you don't like it, use
v1 instead (that's one reason why it's still maintained).

-David