secure viewer

vedaal vedaal@hotmail.com
Mon Jul 22 16:11:01 2002


> Message: 2
> Date: Sun, 21 Jul 2002 15:53:21 +0200
> From: Mark Kirchner <mail@mark-kirchner.de>
> To: gnupg-users <gnupg-users@gnupg.org>
> Subject: Re: secure viewer
...
> On Sunday, July 21, 2002, 2:59:56 PM, vedaal wrote:
> > also, even if the 'for-your-eyes-only' option is left on,
> > it is routinely ignored by the frontends for gnupg
> > {both gpgshell and winpt }
> > and the message displays and copies, as if the option were not there
>
> hm, which version(s)? "gpg 1.1.90-nr1" and "gpgshell 2.45" here and i
> get a different behavior: On decrypting a --for-your-eyes-only message
> without any parameters given, gpg exits with
>
>   gpg: NOTE: sender requested "for-your-eyes-only"
>   gpg: data not saved; use option "--output" to save it
>
> and therefore gpgshell can't display anything.
> When --output is used, the message is saved normally and can be viewed
> (and copied of course) with any viewer.

with gnupg 1.190-nr1 and gpgshell 2.45;
no option of --output in 'options' file
{this can be verified by clicking on 'help' in gpgkeys, and then clicking on
'notepad - current 'options' file'}
gpgshell preferences were set to "show output of decrypt/verify/import in
gui"

upon decryption of a message with the for-your-eyes-only option,
gpgshell gave me the follwing message:

gpg: encrypted with 2048-bit RSA key, ID 85306D25, created 2000-09-05
      "vedaal nistar <vedaal@hotmail.com>"
gpg: encrypted with 1024-bit ELG-E key, ID F0E74948, created 2002-01-15
      "boo <boo@key.test>"
gpg: NOTE: sender requested "for-your-eyes-only"

and gpgtray/decrypted/verified/clipboard will allow the decrypted contents
to be 'copied to clipboard'
and then pasted/saved etc.

winpt 0.5.13 acts pretty much the same, but without any messages,
it simply decrypts the 'current window' and displays the decrypted contents
in the current window, which can then be saved directly, or
copied/pasted/saved
(in 'default' mode, without   'use clipboard viewer to display the
plaintext'  checked in winpt preferences.
if it 'is' checked, then it allows copying to clipboard as in gpgshell)

using the for-your-eyes-only option  'does' display the message  in a
'secure viewer' without the option of copying, when decrypted in pgp (all
versions greater than 5.5)
(5.x can 'ignore' it the same way the gnupg front ends do)

hth,

vedaal