Re: mml-secure: function doubled, passwd chache, use-my-public key

["Jochen Küpper" <jochen-+It19tn3Rl9sbm7dSapR3bNAH6kLmebB@public.gmane.org>]

Uwe Brauer <oub-YB6e1s5WF/He5aOfsHch1g@public.gmane.org> writes:

> I just started to use mml together with gnupg, so far I have used
> pgp2.6.x with mail-crypt.

I use pgg, something you are (or should be) doing as well:
,----[ (info "(pgg)Top") ]
| This manual describes PGG.  PGG is an interface library between Emacs
| and various tools for secure communication.  PGG also provides a simple
| user interface to encrypt, decrypt, sign, and verify MIME messages.
`----

>     - what is the difference between the following functions

,----[ C-h f mml-secure-message-sign-pgp RET ]
| mml-secure-message-sign-pgp is an interactive compiled Lisp function in `mml-sec'.
| It is bound to <menu-bar> <Attachments> <PGP Sign>, C-c RET s o.
| (mml-secure-message-sign-pgp)
| 
| Add MML tag to encrypt/sign the entire message.
| 
| [back]
`----
,----[ C-h f mml-secure-sign-pgp RET ]
| mml-secure-sign-pgp is an interactive compiled Lisp function in `mml-sec'.
| It is bound to <menu-bar> <Attachments> <Secure MIME part> <PGP Sign Part>, C-c RET S o.
| (mml-secure-sign-pgp)
| 
| Add MML tags to PGP sign this MML part.
| 
| [back]
`----
So it seems that the first tags the whole email to be signed, whereas
the second tags a single part of a multipart message to be signed.

>     - all  the time  I  sign, encrypt or   decrypt I  am asked my
>       password,  could  that be  cached  say  for  5  min  (as in
>       mailcrypt)

,----[ (info "(pgg)Caching passphrase") ]
| PGG uses a simple passphrase caching mechanism, which is enabled by
| default.
| 
|  -- Variable: pgg-cache-passphrase
|      If non-`nil', store passphrases.  The default value of this
|      variable is `t'.  If you were worry about security issue, however,
|      you could stop caching with setting it `nil'.
| 
|  -- Variable: pgg-passphrase-cache-expiry
|      Elapsed time for expiration in seconds.
`----

>     - when encrypting, could  may own public  key be used as well
>       (this way I can read that encrypted mail myself)

This happens automatically for me and I do not have anything like that
specified in gpg.conf. Here is my (full) pgg configuration:
,----
| (setq pgg-cache-passphrase t
|       pgg-default-scheme 'gpg
|       pgg-default-user-id "CC1B0B4D"
|       pgg-passphrase-cache-expiry 1800
|       pgg-scheme 'gpg)
`----

Greetings,
Jochen
-- 
Einigkeit und Recht und Freiheit                http://www.Jochen-Kuepper.de
    Liberté, Égalité, Fraternité                GnuPG key: CC1B0B4D
        (Part 3 you find in my messages before fall 2003.)