From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/53957 Path: main.gmane.org!not-for-mail From: Simon Josefsson Newsgroups: gmane.emacs.gnus.general Subject: Re: Entering passphrase twice when sending PGP signed message Date: Sun, 14 Sep 2003 17:18:47 +0200 Sender: ding-owner@lists.math.uh.edu Message-ID: References: NNTP-Posting-Host: deer.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: sea.gmane.org 1063552749 24210 80.91.224.253 (14 Sep 2003 15:19:09 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Sun, 14 Sep 2003 15:19:09 +0000 (UTC) Cc: ding@gnus.org Original-X-From: ding-owner+M2497@lists.math.uh.edu Sun Sep 14 17:19:07 2003 Return-path: Original-Received: from malifon.math.uh.edu ([129.7.128.13]) by deer.gmane.org with esmtp (Exim 3.35 #1 (Debian)) id 19yYeZ-0004mF-00 for ; Sun, 14 Sep 2003 17:19:07 +0200 Original-Received: from localhost ([127.0.0.1] helo=lists.math.uh.edu) by malifon.math.uh.edu with smtp (Exim 3.20 #1) id 19yYeR-0004FL-00; Sun, 14 Sep 2003 10:18:59 -0500 Original-Received: from sclp3.sclp.com ([64.157.176.121]) by malifon.math.uh.edu with smtp (Exim 3.20 #1) id 19yYeJ-0004FF-00 for ding@lists.math.uh.edu; Sun, 14 Sep 2003 10:18:51 -0500 Original-Received: (qmail 15560 invoked by alias); 14 Sep 2003 15:18:51 -0000 Original-Received: (qmail 15555 invoked from network); 14 Sep 2003 15:18:51 -0000 Original-Received: from 178.230.13.217.in-addr.dgcsystems.net (HELO yxa.extundo.com) (217.13.230.178) by sclp3.sclp.com with SMTP; 14 Sep 2003 15:18:51 -0000 Original-Received: from latte.josefsson.org (yxa.extundo.com [217.13.230.178]) (authenticated bits=0) by yxa.extundo.com (8.12.9/8.12.9) with ESMTP id h8EFIldk029583 (version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=FAIL); Sun, 14 Sep 2003 17:18:48 +0200 Original-To: Hrvoje Niksic Mail-Copies-To: nobody X-Payment: hashcash 1.2 0:030914:hniksic@xemacs.org:03c54c215f2a4eb0 X-Hashcash: 0:030914:hniksic@xemacs.org:03c54c215f2a4eb0 X-Payment: hashcash 1.2 0:030914:ding@gnus.org:2732e2550e4fa59d X-Hashcash: 0:030914:ding@gnus.org:2732e2550e4fa59d In-Reply-To: (Hrvoje Niksic's message of "Sun, 14 Sep 2003 17:06:33 +0200") User-Agent: Gnus/5.1003 (Gnus v5.10.3) Emacs/21.3.50 (gnu/linux) Precedence: bulk Xref: main.gmane.org gmane.emacs.gnus.general:53957 X-Report-Spam: http://spam.gmane.org/gmane.emacs.gnus.general:53957 Hrvoje Niksic writes: >> On further thought, one could argue that it should be possible to >> customize the passphrase cache to a mode where decryption happens >> automatically using the passphrase cache, but signing do require >> password input every time, or at least a yes-or-no-p. Since I use >> an infinite passphrase cache lifetime, to be able to read encrypted >> messages easily, I'd want this to make sure I don't sign something I >> wasn't aware of. > > yes-no-p would be fine, but requiring the password every time is going > a bit too far. Entering the passphrase and answering yes-no-p are > IMHO orthogonal. I agree, but to clarify, I think the passphrase cache should have a few modes: (I'm not sure the modes marked with '(?)' are useful.) * Disabled. * Enabled for decrypt. (?) * Enabled for sign. (?) * Enabled for decrypt and sign. * Enabled for decrypt and sign, but require confirmation for sign. * Enabled for decrypt and sign, but require confirmation for decrypt. (?) * Enabled for decrypt and sign, but require confirmation. I.e., I didn't mean PGG should ask for a passphrase and then issue yes-or-no-p, instead I meant that if the passphrase is cached, PGG should use yes-or-no-p before using the cache. Finally, if the OpenPGP implementation doesn't require a passphrase (e.g., gpg-agent), PGG should never ask for a passphrase. I'm not sure if PGG can find this out automatically in a reliable way, so perhaps this should be another modus operandi to add to the above set.