Frontends for Windows
Sun Nov 18 20:08:01 2001
-----BEGIN PGP SIGNED MESSAGE-----
On Sunday 18 November 2001 18:08, Silviu Cojocaru wrote:
> Sunday, November 18, 2001 at 7:06:03 PM ,
> Ingo Klöcker wrote the following
> on the "Frontends for Windows" thread:
> IK> Does it ask you for your passphrase?
> IK> As I don't know this program I really don't know the answer to
> this IK> question. But if the answer is yes then how can you be sure
> the program IK> doesn't leak the passphrase somehow, be it
> intentional (because of IK> malicious code) or unintentional (because
> of buggy code).
> How can you be sure that the front end is really the *only* to
> get your password anyway ?
> It as the same chance as any other soft to catch it. Input can
> be captured in multiple way,the front end does not need to leak,
> I don't see this as an issue.
Maybe you should.
Of course there are many ways to catch a passphrase (on Windows systems
it's probably much easier than on Unix systems). But why shouldn't I
try to minimize the risk by not using any software which I can't check
due to the lack of it's source code?
BTW, I doubt that GPGshell is a trojan horse. But unfortunately I can't
be sure and that's why I would never use it.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org
-----END PGP SIGNATURE-----