Problem with C++ wrapper and gpgme

[David Shaw]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue, May 27, 2003 at 12:50:46AM +0400, Yenot wrote:
> On Monday 26 May 2003 10:14 pm, Marcus Brinkmann wrote:
> >
> > The one thing that can save you even if you use GPGME is that GPGME
> > can be used asynchronously, ie you can use the partial results
> > returned by GPGME to start to display the keylist.
> 
> This can be done with the raw "gpg --export" output as well.  In the
> raw format, GnuPG returns even thousands of keys almost
> instantaneously.  If your parsing code isn't fast enough, you can
> start the display of keys in chunks.

Note there is a gotcha here.  When parsing raw key data, there is no
assurance that some items are valid or not without actually verifying
the self-signatures.  To really use raw data in a key manager, you'd
need to add signature verification and trustdb calculations, and
pretty soon you've recreated GnuPG. ;)

David
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3-cvs (GNU/Linux)
Comment: http://www.jabberwocky.com/david/keys.asc

iD8DBQE+13+w4mZch0nhy8kRAp89AKCkVyb41ybDy+4EYd2KVzGM5E4EJgCfTZbA
+APEv9og4BoPs0oVv3sBJco=
=R0dn
-----END PGP SIGNATURE-----