[Bug 92619] Possibility for KMail to view all encrypted emails if gpg-agent is not running

Gregorio Guidi gregorio.guidi at gmail.com
Wed May 9 00:56:33 UTC 2007


------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
         
http://bugs.kde.org/show_bug.cgi?id=92619         




------- Additional Comments From gregorio.guidi gmail com  2007-05-09 02:56 -------
Just for clarity:
at the moment it is correct to say that kmail switched to a hard dependancy on gpg-agent only for 1 case out of 4 where the passphrase is needed (reading encrypted msg with pgp/mime).
For the other 3 cases (reading encrypted msg with pgp/inline, sending signed msg with pgp/mime, sending signed message with pgp/inline) there is still active code (insecure?) to request the passphrase.

Actually, there is code that deals with the passphrase for all 4 cases, it is just not used in one case, more by accident than by design (see comment #7, comment #44).



More information about the pkg-kde-bugs-fwd mailing list