Few questions

[Werner Koch]

lannert at uni-duesseldorf.de writes:

> > 	echo "Secret and geheime Passphrase" | pgp --passphrase-fd 0 ...
> 
> This exposes the passphrase as well (as long as the echo process is

Ah yes, sure.  I wrote this to demonstrate that feature.  Most shells
have "echo" build in so it is not a different process and the
commandline history is another source of unsecurity ;-).  Mutt does it
correct by writing the password to a pipe - A better solution is a 
kind of password agent like the ssh-agent which can provide the
passphrase in a shared locked memory page.  I'll do this kind of stuff
to integrate gnupg with GnomePGP.


Werner