Re: Documenting gpg-agent

[Richard Stallman]

    Since allout exploits the use of PGG's passphrase handling functions to
    provide a custom passphrase handling, it's not a bug in PGG or gpg-agent,
    I think.

I am not convinced of that.  He says that PGG was ignoring the
passphrases that allout passes in.  Why isn't that a bug?

Meanwhile...we decided that the only secure way to handle passphrases
in Emacs was to do it thru gpg-agent.  So doesn't that mean allout
has a problem due to failing to use gpg-agent?