Re: mml-secure: function doubled, passwd chache, use-my-public key

[Werner Koch <wk@gnupg.org>]

On Fri, 01 Jul 2005 16:43:53 +0200, Simon Josefsson said:

> Does (setq pgg-cache-passphrase nil) help?  It appears to work here.

Nope.

> Then why isn't used automatically?  To get it working I had to start

Isn't that a packaging feature? It was actually pretty hard to get it
into Debian; it was blocked by an Debian internal misunderstanding.
From what I heard, SuSE uses gpg-agent for a long time now and recent
KDE releases actually require gpg-agent.

> the daemon manually and add 'use-agent' to ~/.gnupg/gpg.conf.

Without that many people would inadvertly send the passphrase with the
message; consider the usual invocation pog gpg:

 (echo passphrase; cat message) | gpg --passphrase-fd 0 ... >out.msg

so it is far safer to require a conscious decision from the user.

> is hardly user friendly.  When I log on my Debian box, ssh-agent is
> started and I didn't do anything to make it run.  Perhaps gpg-agent
> can be started in a similar way.  And there seem to be some font bug
> in the pinentry dialog window, presumably Unicode related.

The latest release 1.9.17 may indeed be started like ssh-agent and may
actually replace ssh-agent (except for ssh v1 keys) - you can use a
simple wrapper script named ssh-agent and everything works. See the
info page.


Salam-Shalom,

   Werner