Where to save passphrases?
Bob (Robert) Cavanaugh
robertc at broadcom.com
Mon Jul 28 19:04:18 CEST 2014
My two cents (FWIW):
At work I cache my passphrase for two hours only. It is a pain to re-enter the passphrase, but is required by our threat model. At home, each member of my family has their own computers and I cache my passphrase per session. However I always completely shut down my laptop, I do not hibernate or sleep.
From: Gnupg-users [mailto:gnupg-users-bounces at gnupg.org] On Behalf Of Werner Koch
Sent: Saturday, July 26, 2014 12:08 PM
To: Heinz Diehl
Cc: gnupg-users at gnupg.org
Subject: Re: Where to save passphrases?
On Sat, 26 Jul 2014 14:04, htd at fritha.org said:
> some serious sideeffects if somebody else than you e.g. could read
> your encrypted email, because all he/she has to do is to click on it
> (because the passphrase is still cached).
gpgconf --reload gpg-agent
clears the passphrase cache. Call that before leaving the computer.
Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz.
Gnupg-users mailing list
Gnupg-users at gnupg.org
More information about the Gnupg-users