From mboxrd@z Thu Jan  1 00:00:00 1970
X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/63981
Path: news.gmane.org!not-for-mail
From: Richard Stallman <rms@gnu.org>
Newsgroups: gmane.emacs.gnus.general,gmane.emacs.devel
Subject: Re: Security flaw in pgg-gpg-process-region?
Date: Mon, 13 Nov 2006 15:15:42 -0500
Message-ID: <E1GjiDW-0005Qy-II@fencepost.gnu.org>
References: <b4maca88q6i.fsf@jpl.org> <b4mmze82cse.fsf@jpl.org>
	<b4mwtdbfqob.fsf@jpl.org>
	<9c79059a-61a9-4fa4-8376-638753320a14@well-done.deisui.org>
	<b4mpsj3gw1s.fsf@jpl.org> <b4my7xrfg5o.fsf@jpl.org>
	<4aaf7080-0e3d-4a75-aff5-f9d5bcd0437f@well-done.deisui.org>
	<87fyjz2gaj.fsf@pacem.orebokech.com>
	<v9iroj49cz.fsf@marauder.physik.uni-ulm.de>
	<v9mz9itt6y.fsf_-_@marauder.physik.uni-ulm.de>
	<87ac5gnccs.fsf@mid.deneb.enyo.de>
	<e0049689-8507-4a77-9b09-447f21211249@broken.deisui.org>
	<E1GKXSp-0002f5-Gr@fencepost.gnu.org>
	<8fe569ef-0b5e-4c29-b434-686fce4c619b@well-done.deisui.org>
	<E1GL2iA-0000uI-22@fencepost.gnu.org>
	<smubqpshjs5.fsf@linuxpal.mit.edu>
	<E1GLRBs-0000Wx-NR@fencepost.gnu.org>
	<m2wt808992.fsf@kenny.sha-bang.de>
	<E1GPoWR-0007Gp-QP@fencepost.gnu.org>
	<m23b8pmynt.fsf@kenny.sha-bang.de>
	<E1GjMcy-0002yH-Qz@fencepost.gnu.org> <m2wt60xs4e.fsf@kenny.sha-bang.de>
Reply-To: rms@gnu.org
NNTP-Posting-Host: main.gmane.org
Content-Type: text/plain; charset=ISO-8859-15
X-Trace: sea.gmane.org 1163449064 1238 80.91.229.2 (13 Nov 2006 20:17:44 GMT)
X-Complaints-To: usenet@sea.gmane.org
NNTP-Posting-Date: Mon, 13 Nov 2006 20:17:44 +0000 (UTC)
Cc: satyaki@chicory.stanford.edu, Reiner.Steib@gmx.de,
	ueno@unixuser.org, ding@gnus.org, emacs-devel@gnu.org,
	wk@gnupg.org, gdt@work.lexort.com, fw@deneb.enyo.de,
	jas@extundo.com
Original-X-From: ding-owner+M12504@lists.math.uh.edu Mon Nov 13 21:17:41 2006
Return-path: <ding-owner+M12504@lists.math.uh.edu>
Envelope-to: ding-account@gmane.org
Original-Received: from util0.math.uh.edu ([129.7.128.18])
	by ciao.gmane.org with esmtp (Exim 4.43)
	id 1GjiFM-0006kZ-39
	for ding-account@gmane.org; Mon, 13 Nov 2006 21:17:36 +0100
Original-Received: from localhost ([127.0.0.1] helo=lists.math.uh.edu)
	by util0.math.uh.edu with smtp (Exim 4.63)
	(envelope-from <ding-owner+M12504@lists.math.uh.edu>)
	id 1GjiDj-0001wv-Ew; Mon, 13 Nov 2006 14:15:55 -0600
Original-Received: from mx2.math.uh.edu ([129.7.128.33])
	by util0.math.uh.edu with esmtps (TLSv1:AES256-SHA:256)
	(Exim 4.63)
	(envelope-from <rms@gnu.org>)
	id 1GjiDh-0001wM-2x
	for ding@lists.math.uh.edu; Mon, 13 Nov 2006 14:15:53 -0600
Original-Received: from quimby.gnus.org ([80.91.231.51])
	by mx2.math.uh.edu with esmtp (Exim 4.63)
	(envelope-from <rms@gnu.org>)
	id 1GjiDd-0001kM-99
	for ding@lists.math.uh.edu; Mon, 13 Nov 2006 14:15:52 -0600
Original-Received: from fencepost.gnu.org ([199.232.76.164])
	by quimby.gnus.org with esmtp (Exim 3.35 #1 (Debian))
	id 1GjiDb-0007eu-00
	for <ding@gnus.org>; Mon, 13 Nov 2006 21:15:47 +0100
Original-Received: from rms by fencepost.gnu.org with local (Exim 4.34)
	id 1GjiDW-0005Qy-II; Mon, 13 Nov 2006 15:15:42 -0500
Original-To: Sascha Wilde <wilde@sha-bang.de>
In-reply-to: <m2wt60xs4e.fsf@kenny.sha-bang.de> (message from Sascha Wilde on
	Sun, 12 Nov 2006 22:38:41 +0100)
X-Spam-Score: -2.6 (--)
List-ID: <ding.gnus.org>
Precedence: bulk
Xref: news.gmane.org gmane.emacs.gnus.general:63981 gmane.emacs.devel:62241
Archived-At: <http://permalink.gmane.org/gmane.emacs.gnus.general/63981>

    My gpg-agent related code in pgg is part of CVS Emacs as well as the
    current stable gnus release, and I'm not aware of any problems with
    it.  (I remember Daiki was working on a technically more elegant
    version, but don't know its current status.)

So what we need is text to tell people to use gpg-agent, and telling
them how to do so.

Who wants to write it?