Re: Entering passphrase twice when sending PGP signed message

[Hrvoje Niksic <hniksic@xemacs.org>]

Simon Josefsson <jas@extundo.com> writes:

> Sorry if I gave the wrong impression, I (incorrectly) jumped to the
> assumption that you wanted GPG to only be run once, thus removing the
> need for two passphrase inputs.

That assumption is not entirely incorrect: that was indeed my first
reaction.  But I've understood why it's not technically possible to
run GPG once, and I'd be more than willing to settle for passphrase
caching (which I even suggested!)

> The passphrase cache should work by default, both for signing and
> encrypting IMHO, so if this was your only concern, it is only a
> Small Matter Of Bugfixing.

Excellent.  I'll try to figure out what's going on there when I get
the time.

> On further thought, one could argue that it should be possible to
> customize the passphrase cache to a mode where decryption happens
> automatically using the passphrase cache, but signing do require
> password input every time, or at least a yes-or-no-p.  Since I use
> an infinite passphrase cache lifetime, to be able to read encrypted
> messages easily, I'd want this to make sure I don't sign something I
> wasn't aware of.

yes-no-p would be fine, but requiring the password every time is going
a bit too far.  Entering the passphrase and answering yes-no-p are
IMHO orthogonal.

Thanks for clearing things up.