Confirmation for cached passphrases useful?

Werner Koch wk at gnupg.org
Tue Oct 12 20:46:35 CEST 2010


On Tue, 12 Oct 2010 09:05, dkg at fifthhorseman.net said:

> the kbd and mouse events.  It doesn't prevent synthesized events from
> triggering those inputs (e.g. clicking "OK" on a button).

You are right.  However it is the only protection we can use on X; it
might be helpful in some cases, but as you showed not in this one.
Anyway, if you are already have these permissions you can attack the
keys with all kind of simple tricks.  Thus it is mood.


Salam-Shalom,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.




More information about the Gnupg-users mailing list