From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Simon Josefsson Newsgroups: gmane.emacs.gnus.general,gmane.emacs.devel Subject: Re: Small patch to enable use of gpg-agent with pgg Date: Wed, 22 Mar 2006 12:13:44 +0100 Message-ID: <877j6mg2af.fsf@latte.josefsson.org> References: <2cd46e7f0510031250u66ea1349yb437d539ce4027ef@mail.gmail.com> <2cd46e7f0510061541w73bb6a92wb6d22829b6e804ae@mail.gmail.com> <20051007100014.GB4850@kenny.sha-bang.local> <2cd46e7f0510071106k3d4d3e6agc36f16a37d8b6bc6@mail.gmail.com> <20051007214952.GA30235@kenny.sha-bang.local> <20051008103627.GA1218@kenny.sha-bang.local> <2cd46e7f0510081131h14e2bbeaga7f1a33ebd6347c8@mail.gmail.com> <2cd46e7f0510101415t76825ea7u9749fe23da54ce@mail.gmail.com> <2cd46e7f0510121647x3c51fb65pc883ed61f4e864ab@mail.gmail.com> <2cd46e7f0510200708x4640d1c2t50743cf439e52dd4@mail.gmail.com> <87pskfq361.fsf@latte.josefsson.org> NNTP-Posting-Host: main.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: sea.gmane.org 1143026071 14340 80.91.229.2 (22 Mar 2006 11:14:31 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Wed, 22 Mar 2006 11:14:31 +0000 (UTC) Cc: Daiki Ueno , ding@gnus.org, emacs-devel@gnu.org Original-X-From: ding-owner+m10887@lists.math.uh.edu Wed Mar 22 12:14:28 2006 Return-path: Envelope-to: ding-account@gmane.org Original-Received: from malifon.math.uh.edu ([129.7.128.13]) by ciao.gmane.org with esmtp (Exim 4.43) id 1FM1IF-0003m5-Lg for ding-account@gmane.org; Wed, 22 Mar 2006 12:14:24 +0100 Original-Received: from localhost ([127.0.0.1] helo=lists.math.uh.edu ident=lists) by malifon.math.uh.edu with smtp (Exim 3.20 #1) id 1FM1IA-000081-00; Wed, 22 Mar 2006 05:14:18 -0600 Original-Received: from nas02.math.uh.edu ([129.7.128.40]) by malifon.math.uh.edu with esmtp (Exim 3.20 #1) id 1FM1Hw-00007w-00 for ding@lists.math.uh.edu; Wed, 22 Mar 2006 05:14:04 -0600 Original-Received: from quimby.gnus.org ([80.91.224.244]) by nas02.math.uh.edu with esmtp (Exim 4.52) id 1FM1Hs-00053A-Gv for ding@lists.math.uh.edu; Wed, 22 Mar 2006 05:14:04 -0600 Original-Received: from 178.230.13.217.in-addr.dgcsystems.net ([217.13.230.178] helo=yxa.extundo.com) by quimby.gnus.org with esmtp (Exim 3.35 #1 (Debian)) id 1FM1Hn-0002XP-00 for ; Wed, 22 Mar 2006 12:13:55 +0100 Original-Received: from localhost.localdomain (yxa.extundo.com [217.13.230.178]) (authenticated bits=0) by yxa.extundo.com (8.13.4/8.13.4/Debian-3) with ESMTP id k2MBDic6019229; Wed, 22 Mar 2006 12:13:45 +0100 Original-To: Sascha Wilde OpenPGP: id=B565716F; url=http://josefsson.org/key.txt X-Hashcash: 1:21:060322:ding@gnus.org::gdnRhoaQlAUFIRin:2PKf X-Hashcash: 1:21:060322:wilde@sha-bang.de::y9nOapDMckhJr25w:5OOh X-Hashcash: 1:21:060322:ueno@unixuser.org::VCeE4EhMNy6MqxMT:50XT X-Hashcash: 1:21:060322:emacs-devel@gnu.org::un07vlhKNOgIsPvL:A5wX In-Reply-To: (Sascha Wilde's message of "Wed, 22 Mar 2006 12:03:22 +0100") User-Agent: Gnus/5.110004 (No Gnus v0.4) Emacs/22.0.50 (gnu/linux) X-Spam-Status: No, score=-2.4 required=5.0 tests=AWL,BAYES_00, FORGED_RCVD_HELO autolearn=ham version=3.1.0 X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on yxa-iv X-Virus-Scanned: ClamAV version 0.88, clamav-milter version 0.87 on yxa.extundo.com X-Virus-Status: Clean X-Spam-Score: -2.5 (--) Precedence: bulk Original-Sender: ding-owner@lists.math.uh.edu Xref: news.gmane.org gmane.emacs.gnus.general:62360 gmane.emacs.devel:51957 Archived-At: Sascha Wilde writes: >> Is there a choice of utilizing --status-fd output? That is, query a >> user for his passphrase only when gpg requested (i.e. we see >> NEED_PASSPHRASE) > > I don't understand this point -- with the proposed patch the user > already only gets queried for the passphrase when gpg needs it -- or > am I missing something? Right now, pgg assume that gpg will need a passphrase so it asks the user for one. It may be better if pgg postpone the passphrase query until gpg tell pgg that it needs a passphrase. Then it is only queried for when it is needed. This should be more reliable, but slightly more complicated to implement (asynchronous code). Gpg doesn't need a passphrase if the agent is used, or (I guess) if the key isn't protected with a password. If a smartcard is used, gpg need a pin code and not a passphrase, I'm not sure pgg can handle this at all now. (This last point is separate, and wouldn't be solved if we implement Daiki's idea.) I may have misunderstood Daiki though...