[Enigmail] Telling Enigmail to remember passwords?

Michael J Gruber michaeljgruber+mozdevnews at fastmail.fm
Thu Feb 19 06:53:13 PST 2009


John Clizbe venit, vidit, dixit 17.02.2009 12:14:
> Michael J Gruber wrote:
>> John W. Moore III venit, vidit, dixit 12.02.2009 12:12:
>>> Michael J Gruber wrote:
>>>> Also, you might want to look into using gpg-agent.
>>> I disagree; unless One requires the 'features' of GPG2 then GPG Agent is
>>> totally unnecessary!  Enigmail can/will cache the passphrase for  the
>>> necessary amount of time.
>> gpg-agent isn't really about making gpg2 features available, although it
>> is part of gpg2 now.
>>
>> The main point is that gpg-agent is small and well-audited. OTOH, having
>> Enigmail cache the passphrase means having Thunderbird cache the
>> passphrase. So, from a security perspective gpg-agent is the much better
>> approach, rather than being "totally unnecessary". May I suggest you
>> recheck whether your strong wording is really an appropriate match to my
>> "Also, you might want to..."?
>>
>> Besides, gpg-agent keeps the passphrase across restarts of TB and
>> provides it to other clients as well, although this might not matter to
>> the OP.
> 
> 
> All of those are correct, Michael, BUT I thoroughly understand John's POV and I'll
> add, as it was stated, I disagree. "Also, you might want to look into using
> gpg-agent." lacks a key caveat: Also since you are running a Linux,..." would be
> correct in this case.

...but he is! And yes, I had checked before answering.

But if two native speakers don't take "Also, you might want to..." as a
hint offering an additional option, not invalidating nor disapproving
the first one given, then there's really no point in dragging this on.

Michael


More information about the Enigmail mailing list