Which release should we be using?

Dan McGee dpmcgee at gmail.com
Mon Aug 22 15:27:04 CEST 2011


On Mon, Aug 22, 2011 at 7:01 AM, Werner Koch <wk at gnupg.org> wrote:
> On Mon, 22 Aug 2011 10:29, papillion at gmail.com said:
>
>> because I don't like having to use pinentry since it doesn't support cut
>> and paste. My questions are these:
>
> That is on purpose.  If you have your passphrase on file for c+p you may
> as well use no passphrase at all.  gpg-agent caches your passphrase; set
> the caching time to whatever you l; this is far safer than to use c+p.

So you're enforcing policy via disabling copy and paste? This is
extremely shortsighted. Any password management program like Keepass
makes transfer via the clipboard easy and relatively safe (clearing it
after 10 seconds), so that doesn't sound like the safety of "no
passphrase at all".

-Dan



More information about the Gnupg-users mailing list