Re: Entering passphrase twice when sending PGP signed message

[Hrvoje Niksic <hniksic@xemacs.org>]

Simon Josefsson <jas@extundo.com> writes:

> Hrvoje Niksic <hniksic@xemacs.org> writes:
>
>> How about remembering the passphrase and reusing it the second time?
>> The passphrase would be forgotten the moment the mail sending process
>> is finished.  At first that sounds like a violation of passphrase
>> privacy, but think about it: as long as the string is not copied
>> around, it's no more dangerous to use it twice and delete it than to
>> prompt for it twice, deleting it each time around.
>
> This is supposed to work by default,

Now I'm somewhat confused because your previous mail sounded exactly
the opposite -- like it's not supposed to work by default.  But then
again, I haven't studied the code, it might be a much more complex
issue than I'm aware of.

> but if you have multiple PGP identities, there is a known problem.

But I don't have multiple PGP identities, at least not for now.

> For me, the passphrase is cached so everything is decrypted
> automatically, but for signing I have to enter it (twice).

I haven't tried encryption/decryption yet.  I wanted to start with
something simple, such as signing, and stumbled on the
type-the-passphrase-twice thing which makes (to me) the whole
experience a rather unpleasant one.