GnuPG from WEBSITE

Owen Blacker owen@flirble.org
Sun Oct 28 14:53:02 2001


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ryan Malayter wrote (2001-10-26 T 14:03 -0500):
>
> Installing GnuPG only involves copying firectories, so you should be able to
> use it on your remote site.
>
> I think you can use GnuPG  to do what you want if:
> 1) Jmail can use any text file as a message body.
> 2) you can copy the GNUpg dir to your server (after you've generated and
> imported keys into the GNuPG keyring)
> 3) you can run an operating system command from within your asp script, like
> this:
>   Set sObj = createObject(wscript.shell)
>   sObj.Run("d:\gnupg gpg.exe --homedir d:\gpupg -e -a -r you@company.com -o
> d:\temp\encryptedmsg.asc d:\temp\messagebody.txt",1,true)
> 4) Have jmail use d:\temp\encryptedmsg.asc as the message body

If all of that is possible, however, the system administrator should be
sacked immediately.  If the system administrator lets users instantiate
Windows Script Host using a CreateObject("WScript.Shell") call (you
missed out the quotes, btw  :)  then (s)he deserves to have the whole
system trashed.

Chances are you won't be able to do anything without installing software
on the system, as anyone who set up the system in such a way to allow
the suggested code to work should not be administering servers.


O x
- -- 
Owen Blacker | Senior Software Developer and InfoSecurity Consultant
See http://www.owens-place.org.uk/pgp.html -- more about my PGP keys
Sig  0xb48e805e | 0e31 ac2a 4ff2 62a0 89da  ddef 4223 99a6 b48e 805e
- --
They that can give up essential liberty to obtain a little temporary
 safety deserve neither liberty nor safety --Benjamin Franklin, 1759
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE73A1QQiOZprSOgF4RArsDAJ9VUUuWvbjMEEjBNF6ZVMGYUZyBiACcDstl
iLs1BWSSyViYt+QwV2YZP4c=
=Mw5B
-----END PGP SIGNATURE-----