From: Daniel Kahn Gillmor Date: Sun, 7 Jul 2013 23:08:22 +0000 (+2000) Subject: Re: [PATCH 0/2] Prompting for the GPG password within Emacs X-Git-Url: http://git.tremily.us/gitweb.cgi?a=commitdiff_plain;h=6eb2781dcd9f692f4472a9d3d2a7f52f744f511c;p=notmuch-archives.git Re: [PATCH 0/2] Prompting for the GPG password within Emacs --- diff --git a/a1/86df5b7a719f95efcb4845046262e917c0df1b b/a1/86df5b7a719f95efcb4845046262e917c0df1b new file mode 100644 index 000000000..12e2f0899 --- /dev/null +++ b/a1/86df5b7a719f95efcb4845046262e917c0df1b @@ -0,0 +1,118 @@ +Return-Path: +X-Original-To: notmuch@notmuchmail.org +Delivered-To: notmuch@notmuchmail.org +Received: from localhost (localhost [127.0.0.1]) + by olra.theworths.org (Postfix) with ESMTP id ADD5C431FAF + for ; Sun, 7 Jul 2013 16:08:33 -0700 (PDT) +X-Virus-Scanned: Debian amavisd-new at olra.theworths.org +X-Spam-Flag: NO +X-Spam-Score: 0 +X-Spam-Level: +X-Spam-Status: No, score=0 tagged_above=-999 required=5 tests=[none] + autolearn=disabled +Received: from olra.theworths.org ([127.0.0.1]) + by localhost (olra.theworths.org [127.0.0.1]) (amavisd-new, port 10024) + with ESMTP id v2lOKIr6EhDv for ; + Sun, 7 Jul 2013 16:08:28 -0700 (PDT) +Received: from che.mayfirst.org (che.mayfirst.org [209.234.253.108]) + by olra.theworths.org (Postfix) with ESMTP id 396BC431FAE + for ; Sun, 7 Jul 2013 16:08:28 -0700 (PDT) +Received: from [10.156.156.160] (cpe-69-204-251-149.nyc.res.rr.com + [69.204.251.149]) + by che.mayfirst.org (Postfix) with ESMTPSA id 6419FF97F; + Sun, 7 Jul 2013 19:08:23 -0400 (EDT) +Message-ID: <51D9F4E6.1030504@fifthhorseman.net> +Date: Sun, 07 Jul 2013 19:08:22 -0400 +From: Daniel Kahn Gillmor +User-Agent: Mozilla/5.0 (X11; Linux x86_64; + rv:17.0) Gecko/20130630 Icedove/17.0.7 +MIME-Version: 1.0 +To: Neil Roberts +Subject: Re: [PATCH 0/2] Prompting for the GPG password within Emacs +References: <1373195672-9338-1-git-send-email-neil@linux.intel.com> +In-Reply-To: <1373195672-9338-1-git-send-email-neil@linux.intel.com> +X-Enigmail-Version: 1.5.1 +Content-Type: multipart/signed; micalg=pgp-sha512; + protocol="application/pgp-signature"; + boundary="----enig2SSCGSASEDNCAEHGCMEIM" +Cc: notmuch@notmuchmail.org +X-BeenThere: notmuch@notmuchmail.org +X-Mailman-Version: 2.1.13 +Precedence: list +List-Id: "Use and development of the notmuch mail system." + +List-Unsubscribe: , + +List-Archive: +List-Post: +List-Help: +List-Subscribe: , + +X-List-Received-Date: Sun, 07 Jul 2013 23:08:33 -0000 + +This is an OpenPGP/MIME signed message (RFC 4880 and 3156) +------enig2SSCGSASEDNCAEHGCMEIM +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: quoted-printable + +Hi Niel-- + +On 07/07/2013 07:14 AM, Neil Roberts wrote: + +> I've recently started using notmuch to try and read PGP-encrypted +> email. However the trouble is I normally access my email remotely via +> SSH and it's very difficult to get gpg-agent to work in those +> circumstances. I've therefore made some patches to try and get Emacs +> to prompt for the password. They are based on the way mml communicates +> with gpg by having two pipes so that notmuch can notify Emacs that it +> needs a password and it will reply on the other. + +I strongly encourage you to get the gpg-agent model sorted out for your +use case, instead of moving in the direction of this patch series. + +The fewer tools that handle your OpenPGP passphrase the better, and +future versions of GnuPG will not be able to work without the gpg-agent +anyway (all secret key activity will be handled by the agent as of gnupg +version 2.1, if i understand upstream's development plans correctly). + +I personally hope that notmuch (and notmuch-emacs) will resist the urge +to try to handle any sort of sensitive material like secret keys or +passphrases directly, but will leave that work to libraries or +out-of-process agents. + +Can you describe what you've tried in terms of using gpg-agent? where +are your secret keys stored? are they on your local machine, or on the +remote machine? + +Regards, + + --dkg + + +------enig2SSCGSASEDNCAEHGCMEIM +Content-Type: application/pgp-signature; name="signature.asc" +Content-Description: OpenPGP digital signature +Content-Disposition: attachment; filename="signature.asc" + +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v1.4.12 (GNU/Linux) +Comment: Using GnuPG with Icedove - http://www.enigmail.net/ + +iQJ8BAEBCgBmBQJR2fTmXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w +ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRFQjk2OTEyODdBN0FEREUzNzU3RDkxMUVB +NTI0MDFCMTFCRkRGQTVDAAoJEKUkAbEb/fpcvLoP/2I4h0TeYVC+J9/k/5pxieaG +oAYJ9XZ8D0i6UZi4jQqlK9yq6O4WN0URRXKoFURUdL6+09P2jTUvsyBo21C9Z1PN +dV4xkTy5lMYRbRjOcm0CAl1VRoMcH/8gH1Ae09jr+MpmK5Qn6MHYVrllzSK/p31v +yL9dozLeZtiSdRXpFtq31XKqhhOH7dhZDWB0/T4DKZfHqZ+VYIEIc3Y6esK6Mj5A +haCam/SLQSfPbvZWvhTRJnFuQXLNSwrWJH/pTJd6za8mASzjbtXhtjVCs7xmEPtW +buTfdqCG2/YUr6ZnwTESvRz2MkFgglgm8zstpLObdQcljyzTU2E2bPyIJ7IplyYT +auphsZyeohzX8FC9PK45J0RqJqKWU85XgbZxAbYVDcRY+STrRz+cz+582ktIPTD+ +kkSUrLWyKI3Ixo+mbUeOhlDkO40bslP1qm01j/gy3NU6qwfPVx6jHJ+YhlAYcGp6 +HcFNEsvyghU1hLUbbeHb+jsuZ/2zJBb1sJaBRYV0hymIuToooT6Jea8eMNbg/jj0 +acx1cSxsPCn03KLY4LxKnER1qoWCekhiQZQtSYzU51xhVW1ElEDPWNGsPqJk4wS1 +WFCl8iSS4GVo+KTlqfyWTQLGOVHAhOaKl4AgAknSaUdPIpxYwPc8pSdj8WhFNDNj +xXxbWe7vnSwVEhoGWPp5 +=SXrO +-----END PGP SIGNATURE----- + +------enig2SSCGSASEDNCAEHGCMEIM--