From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Daiki Ueno Newsgroups: gmane.emacs.bugs Subject: bug#15552: 24.3.50; epa-file-cache-passphrase-for-symmetric-encryption not respected with GnuPG 2.x Date: Tue, 08 Oct 2013 16:03:22 +0900 Message-ID: <87hacsutvp.fsf-ueno@gnu.org> References: <87r4bx0xsk.fsf@flea.lifelogs.com> <87fvscwswx.fsf-ueno-ueno@gnu.org> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: ger.gmane.org 1381215856 32724 80.91.229.3 (8 Oct 2013 07:04:16 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Tue, 8 Oct 2013 07:04:16 +0000 (UTC) Cc: tzz@lifelogs.com, 15552@debbugs.gnu.org To: Stefan Monnier Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Tue Oct 08 09:04:16 2013 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1VTRL5-00086Y-4b for geb-bug-gnu-emacs@m.gmane.org; Tue, 08 Oct 2013 09:04:15 +0200 Original-Received: from localhost ([::1]:34935 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VTRL4-0000f8-O0 for geb-bug-gnu-emacs@m.gmane.org; Tue, 08 Oct 2013 03:04:14 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:52844) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VTRKx-0000eZ-0a for bug-gnu-emacs@gnu.org; Tue, 08 Oct 2013 03:04:11 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1VTRKs-0007fZ-OE for bug-gnu-emacs@gnu.org; Tue, 08 Oct 2013 03:04:06 -0400 Original-Received: from debbugs.gnu.org ([140.186.70.43]:53723) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VTRKs-0007fE-Ls for bug-gnu-emacs@gnu.org; Tue, 08 Oct 2013 03:04:02 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.80) (envelope-from ) id 1VTRKr-00039B-OG for bug-gnu-emacs@gnu.org; Tue, 08 Oct 2013 03:04:01 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Daiki Ueno Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 08 Oct 2013 07:04:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 15552 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: notabug Original-Received: via spool by 15552-submit@debbugs.gnu.org id=B15552.138121581312039 (code B ref 15552); Tue, 08 Oct 2013 07:04:01 +0000 Original-Received: (at 15552) by debbugs.gnu.org; 8 Oct 2013 07:03:33 +0000 Original-Received: from localhost ([127.0.0.1]:33783 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1VTRKN-000384-MC for submit@debbugs.gnu.org; Tue, 08 Oct 2013 03:03:32 -0400 Original-Received: from fencepost.gnu.org ([208.118.235.10]:52158) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1VTRKK-00037t-SF for 15552@debbugs.gnu.org; Tue, 08 Oct 2013 03:03:29 -0400 Original-Received: from du-a.org ([2001:e41:db5e:fb14::1]:38419 helo=debian) by fencepost.gnu.org with esmtpsa (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1VTRKJ-0001B0-UM; Tue, 08 Oct 2013 03:03:28 -0400 In-Reply-To: (Stefan Monnier's message of "Mon, 07 Oct 2013 23:14:41 -0400") User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/23.4 (gnu/linux) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 3.x X-Received-From: 140.186.70.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.bugs:79023 Archived-At: Stefan Monnier writes: >>> 1. On the local system, install GnuPG 2.x and don't run the gpg-agent >>> 2. Set epa-file-cache-passphrase-for-symmetric-encryption to t >>> 3. Open file.gpg: password dialog pops up >>> 4. close file.gpg >>> 5. Open file.gpg: password dialog pops up again >>> Step (5) should not prompt. It works properly with GnuPG 1.x. >> That's intended behavior. > > Could you give the rationale for it? When gpg-agent is not properly set up as a daemon, gpg2 invokes gpg-agent internally for each session. In the above case, there are two gpg2 sessions (two "Open") and thus there are two gpg-agent processes, which don't share the passphrase. >> It is documented and I stated a number of times the reason and why >> I chose such a lengthy name of the variable and the default is nil: > > I understand why it is nil by default, but if the user sets it to t, > presumably he doesn't care about the fact that storing the password in > Emacs heap is insecure. When epg.el was written, the intention of the option was the last resort for those who only have gpg1 and can't use gpg-agent. Since then, I've recommended to migrate to more secure way (i.e. using gpg-agent). Given that gpg-agent (gpg2) is now available everywhere, I think there's no reason to advertise the use of this variable, although at some point a few people (afaik, only Ted) started exploiting this option to provide degraded security for usability. So the question is, would we really like to proactively support such a degraded security in Emacs?