GPG agent for W32

Bernd Eckenfels lists at lina.inka.de
Sun May 13 20:17:02 CEST 2001


On Mon, May 07, 2001 at 08:49:08PM +0200, Timo Schulz wrote:
> As a solution I used a socket together with the loopback
> interface 127.0.0.1. Now my question, in my opinion to use
> the 'lo' device prevent users to connect to the used port
> from the network. Do I miss something or is there a way to
> connect from outside this machine?

It is quite secure to use the 127.0.0.1 so nobody from outside can connect
to it. But since everybody from this local machine can connect to the socket
you need to think about securing the access to the agent anyway. One bad
thing about TCP sockets is, that you cant to credential passing as you can
do with other IPCs like Unix-Domain or Named Pipes.

Greetings
Bernd
-- 
  (OO)      -- Bernd_Eckenfels at Wendelinusstrasse39.76646Bruchsal.de --
 ( .. )  ecki@{inka.de,linux.de,debian.org} http://home.pages.de/~eckes/
  o--o     *plush*  2048/93600EFD  eckes at irc  +497257930613  BE5-RIPE
(O____O)  When cryptography is outlawed, bayl bhgynjf jvyy unir cevinpl!




More information about the Gnupg-devel mailing list