Encrypt directly to keyfile

[MFPA]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi


On Sunday 6 July 2014 at 10:18:20 PM, in
<mid:trinity-c0cd6300-619d-419e-aae3-a6cb83269f55-1404681500884 at 3capp-webde-bs22>,
Matthias Fischer wrote:


> I can achieve something similar, by using:
> $ gpg --no-default-keyring --keyring /tmp/keyring.once
>  --import <KEYFILE>
> $ gpg --no-default-keyring --keyring /tmp/keyring.once
> --trust-model always --recipient <KEY-ID> -e
>
> But this requires an additional temporary file (which
> needs to be deleted), and I still have to look for the
> Key-IDs in the file, to give them as parameters.

In place of <KEY-ID>, can't you use a substring match such as "*@" or
"*." (without quotes)? Either of those would match any key's user-id
if it contained an email address.





> The interface could
> provide the user with an input-area to paste a public
> key(s) into, and then every automated mail (like
> forgotten-password, notifications or reminders) could
> be encrypted directly to those keys.

There was a project called Encreep [1] mentioned on this list about
six months ago. It is closed-source, time unlimited trialware. Keys
are pasted in or loaded from keyfiles - no keyrings or trust models.
Messages or files to encrypt/sign are pasted or loaded in the same
way.

[1] <https://www.encreep.com/>





But if the user is pasting a public key for future use, why not save
them all to a keyring and associate the key-ID or fingerprint with the
user's records, then use that key-ID or fingerprint to select the
right key to encrypt the forgotten-password messages, notifications or
reminders?

- --
Best regards

MFPA                    mailto:2014-667rhzu3dc-lists-groups at riseup.net

The trouble with words is that you never know whose mouths they've been in.
-----BEGIN PGP SIGNATURE-----

iPQEAQEKAF4FAlO57i5XFIAAAAAALgAgaXNzdWVyLWZwckBub3RhdGlvbnMub3Bl
bnBncC5maWZ0aGhvcnNlbWFuLm5ldEJBMjM5QjQ2ODFGMUVGOTUxOEU2QkQ0NjQ0
N0VDQTAzAAoJEKipC46tDG5p6ZcD/1Idhyjc5kBldo/lqpKH/gO3UfFMT0/mXrjV
cRbFHIfdhGu6xw52yfLAB5dpumvSxriMSxlQfMew2KXsKzTUinNFF4oeIN/IQ6gz
0Jfyk49lE8q/U8AFNNQxUN9v/cz5gUXz6ddNkm/olLe1dnZwEUfUXXaRX10udgzc
yZs/wLeb
=DCnE
-----END PGP SIGNATURE-----