Please remove MacGPG from due to serious security concerns

Werner Koch wk at
Wed Feb 18 06:21:46 CET 2015

On Tue, 17 Feb 2015 17:00, mailing-lists at said:

> command line tools. *I think there is no more reason to develop
> MacGPG*, i.e. a port, anymore. Let the port die.

Can you briefly explain how Patrick's new installer [1] is related to that?
Would it be an option to use that as the core for gpgtools?


> wrappers or fixes upstream. Case in point: Has the fix for gpg-agent /
> scdaemon hang been discussed upstream at all [4], [5]? In MacGPG there
> is still ../libexec/gnupg-pcsc-wrapper which has been modified in
> commit f4c3e1bb to fix the issues of scdaemon hanging in Yosemite
> [6]. GnuPG proper has removed it in bc6b45 [7]. How would one go about

I just tried to figure out what this is about.  The problem description
is pretty clear but I can't easliy find a description of the solution.
I don't think this has been discussed upstream. 

Right, in 2.1 there is no more need for the pcsc-wrapper because we
switched from Pth to native threads (wrapped by the ntph library).

> fixing this issue for upstream? Has GPGTools contributed anything
> regarding this other than the initial discussion[8] about the issue?

There was no followup on my answer.  As we all now mailing lists are a
primary source to evaluate problems and thus it is usually a good idea
to post the found or not-found solution.  Moving the discussion to some
forum is not helpful.

> the underlying engine. I would argue GnuPG should take the
> responsibility of such tooling where there isn’t a good option. Other
> *NIX systems are doing fairly well already so I suppose a Mac GUI
> would really be the urgent one.

Unfortunately I have no experience with OS X and I doubt it makes sense
for me to jump into this too.  We will have a GnuPG summit in April and
I hope that the gpgtools folks will attend it so that the problems with
that important platform can be discussed.  Please contact me off-list if
you have any questions.



Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.

More information about the Gnupg-users mailing list