Re: Entering passphrase twice when sending PGP signed message

[Simon Josefsson <jas@extundo.com>]

Hrvoje Niksic <hniksic@xemacs.org> writes:

> Simon Josefsson <jas@extundo.com> writes:
>
>> I agree, but to clarify, I think the passphrase cache should have a
>> few modes: (I'm not sure the modes marked with '(?)' are useful.)
>>
>> * Disabled.
>> * Enabled for decrypt. (?)
>> * Enabled for sign. (?)
>> * Enabled for decrypt and sign.
>> * Enabled for decrypt and sign, but require confirmation for sign.
>> * Enabled for decrypt and sign, but require confirmation for decrypt. (?)
>> * Enabled for decrypt and sign, but require confirmation.
>>
>> I.e., I didn't mean PGG should ask for a passphrase and then issue
>> yes-or-no-p, instead I meant that if the passphrase is cached, PGG
>> should use yes-or-no-p before using the cache.
>
> I still believe that caching should be orthogonal to using
> yes-or-no-p.  That is, if confirmation is required for signing, I
> should be required to confirm.  Then, depending on whether passphrase
> has been cached or not, I may or may not also have to type in the
> passphrase.

If you run with a disabled passphrase cache, I don't think this would
result in a sensible user interface.  Specifically: you would have to
enter the passphrase AND type 'yes' every time.  I would be rather
annoyed by the useless yes-or-no-p query in this situation.  Entering
the passphrase is, to me at least, the same as approving the
operation.

> On the other hand, does it really happen to you that you could sign
> something by mistake?  When I was signing my mail, I had to press `C-c
> C-m s o' [1] to add the appropriate MML markup -- it didn't happen
> automagically.

It happens for me automatically, I have some hooks that look up an
attribute in my bbdb that say if I should add a MML encrypt tag, per
recipient.  But my customization is buggy (naturally), so sometimes it
add a MML tag erroneously, and I rarely notice until I try to send the
message.  But since there is a passphrase prompt (or would be a
yes-or-no-p) I can C-g and remove the MML tag.

> Who ever came up with those key bindings??

Can you find a better, unallocated, key binding, that doesn't conflict
with some mode that often can be enabled in message buffers?