Frontends for Windows

Loic Bernable
Mon Nov 19 17:23:01 2001

Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Selon Silviu Cojocaru :=20
> Same applies to Linux, get yourself rooted and see that it is
> not a big issue.

Except that I can access and audit Linux source. But this is not the
main topic.
> > This sentence was not against you. But one should not lower
> > the safety level of such a program, especially in order to
> > improve friendship.
> How do you know that the security level of GPGShell is *low*,
> have you done any testing, have you tried catching the input or
> detecting the certain area of the memory where it keeps the
> password just before passing it to gpg ?

We don't know if it is *high*, and we don't have the ability to know as
we don't have access to the source code. We can not audit this code.

And one elementary rule of security is to mistrust what we can not fully
trust. Therefore, I don't trust GPGshell as I can not make myself sure
that it is secure. Period.
> Watching BUGTRAQ for quite a while now, and I did not see
> GPGShell announced as having problems... this should mean
> something yes?


This discussion is over.

### Lo=EFc Bernable aka Leto -- -- Parinux, April, LinuxFR #=
A)bort, R)etry, I)gnore, V)alium?

Content-Type: application/pgp-signature
Content-Disposition: inline

Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see